CVE-2026-57573 PUBLISHED

Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint

Assigner: GitHub_M
Reserved: 24.06.2026 Published: 06.07.2026 Updated: 07.07.2026

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handle_stream_crawl_request passed seed URLs straight to the crawler with no destination validation, allowing a remote unauthenticated client to call POST /crawl/stream or POST /crawl with crawler_config.stream=true with a URL pointing at an internal, private, or link-local address; the server fetched it and streamed the response body back. This issue is fixed in version 0.9.0.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS Score: 8.6

Product Status

Vendor unclecode
Product crawl4ai
Versions
  • Version < 0.9.0 is affected

References

Problem Types

  • CWE-918: Server-Side Request Forgery (SSRF) CWE