CVE-2026-26216

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.

CVSS v3 10.0 CRITICAL

10.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/unclecode/crawl4ai/blob/main/docs/blog/release-v0.8.0.md	Release Notes
https://github.com/unclecode/crawl4ai/security/advisories/GHSA-5882-5rx9-xgxp	Mitigation Vendor Advisory
https://www.vulncheck.com/advisories/crawl4ai-docker-api-unauthenticated-remote-code-execution-via-hooks-parameter	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-02-12 16:16

Updated : 2026-07-14 16:16

NVD link : CVE-2026-26216

Mitre link : CVE-2026-26216

CVE.ORG link : CVE-2026-26216

JSON object : View

Products Affected

kidocode

crawl4ai

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-26216", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26216", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-02-12T21:01:07.012019Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 10.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/unclecode/crawl4ai", "vendor": "unclecode", "product": "Crawl4AI", "versions": [{"status": "affected", "version": "0", "lessThan": "0.8.0", "versionType": "semver"}], "packageURL": "pkg:github/unclecode/crawl4ai", "packageName": "crawl4ai", "defaultStatus": "unaffected"}]}], "published": "2026-02-12T16:16:17.447", "references": [{"url": "https://github.com/unclecode/crawl4ai/blob/main/docs/blog/release-v0.8.0.md", "tags": ["Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/unclecode/crawl4ai/security/advisories/GHSA-5882-5rx9-xgxp", "tags": ["Mitigation", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/crawl4ai-docker-api-unauthenticated-remote-code-execution-via-hooks-parameter", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks."}, {"lang": "es", "value": "Las versiones de Crawl4AI anteriores a la 0.8.0 contienen una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo en el despliegue de la API de Docker. El endpoint /crawl acepta un par\u00e1metro hooks que contiene c\u00f3digo Python que se ejecuta usando exec(). La funci\u00f3n incorporada __import__ se incluy\u00f3 en las funciones incorporadas permitidas, lo que permite a atacantes remotos no autenticados importar m\u00f3dulos arbitrarios y ejecutar comandos del sistema. La explotaci\u00f3n exitosa permite el compromiso total del servidor, incluyendo la ejecuci\u00f3n arbitraria de comandos, acceso de lectura y escritura de archivos, exfiltraci\u00f3n de datos sensibles y movimiento lateral dentro de redes internas."}], "lastModified": "2026-07-14T16:16:58.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A143EE5-8015-4179-B40B-AB6ABF79E951", "versionEndExcluding": "0.8.0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}