CVE-2026-57572

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.

CVSS v3 10.0 CRITICAL

10.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/unclecode/crawl4ai/commit/60886d1a0c52682e4c83a7cef9dfac417fff6bd2	Patch
https://github.com/unclecode/crawl4ai/security/advisories/GHSA-r253-r9jw-qg44	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*

History

25 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Crawl4AI es un rastreador y extractor web de código abierto compatible con LLM. Antes de la versión 0.9.0, el servidor API de Docker aceptaba argumentos ’browser_config.extra_args’ proporcionados en la solicitud, que se pasaban a los argumentos de lanzamiento de Chromium. Un atacante podría inyectar conmutadores de Chromium que reemplazaran un comando de lanzamiento de proceso hijo junto con --no-zygote, haciendo que Chromium bifurcara o ejecutara un comando controlado por el atacante como el usuario en tiempo de ejecución del contenedor. La API de Docker no está autenticada por defecto, por lo que una única solicitud permite la ejecución arbitraria de comandos. Este problema está solucionado en la versión 0.9.0.

Information

Published : 2026-07-06 21:16

Updated : 2026-10-25 20:10

NVD link : CVE-2026-57572

Mitre link : CVE-2026-57572

CVE.ORG link : CVE-2026-57572

JSON object : View

Products Affected

kidocode

crawl4ai

CWE

CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-57572", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-57572", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-08T17:13:03.306047Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "unclecode", "product": "crawl4ai", "versions": [{"status": "affected", "version": "< 0.9.0"}]}]}], "published": "2026-07-06T21:16:58.047", "references": [{"url": "https://github.com/unclecode/crawl4ai/commit/60886d1a0c52682e4c83a7cef9dfac417fff6bd2", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/unclecode/crawl4ai/security/advisories/GHSA-r253-r9jw-qg44", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-88"}, {"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0."}, {"lang": "es", "value": "Crawl4AI es un rastreador y extractor web de c\u00f3digo abierto compatible con LLM. Antes de la versi\u00f3n 0.9.0, el servidor API de Docker aceptaba argumentos \u2019browser_config.extra_args\u2019 proporcionados en la solicitud, que se pasaban a los argumentos de lanzamiento de Chromium. Un atacante podr\u00eda inyectar conmutadores de Chromium que reemplazaran un comando de lanzamiento de proceso hijo junto con --no-zygote, haciendo que Chromium bifurcara o ejecutara un comando controlado por el atacante como el usuario en tiempo de ejecuci\u00f3n del contenedor. La API de Docker no est\u00e1 autenticada por defecto, por lo que una \u00fanica solicitud permite la ejecuci\u00f3n arbitraria de comandos. Este problema est\u00e1 solucionado en la versi\u00f3n 0.9.0."}], "lastModified": "2026-10-25T20:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7ED5B79-F478-4E2C-B384-BA572D992FAA", "versionEndExcluding": "0.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}