GitHub Advisoryadvisory · PyPI

GHSA-vx9w-5cx4-9796 Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

CRITICAL Published 2026-01-16 Modified 2026-06-05 Official page ↗
Aliases
CVE-2026-26217
Ecosystem
PyPI
Packages
Crawl4AI
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2026-01-16

Affected packages

• PyPI Crawl4AI: < 0.8.0 → fixed in 0.8.0

Description

A local file inclusion vulnerability exists in the Crawl4AI Docker API. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing attackers to read arbitrary files from the server filesystem. Attack Vector: ```json POST /execute_js { "url": "file:///etc/passwd", "scripts": ["document.body.innerText"] } ``` Impact An unauthenticated attacker can: • Read sensitive files (/etc/passwd, /etc/shadow, application configs) • Access environment variables via /proc/self/environ • Discover internal application structure • Potentially read credentials and API keys Workarounds 1. Disable the Docker API 2. Add authentication to the API 3. Use network-level filtering

Related

Alias · CVE (1)

  • CVE-2026-26217 Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References