CVE-2026-56266

概要

参考情報

• unclecode/crawl4ai · Product
• unclecode/crawl4ai security advisory · Mitigation
• vulncheck.com/advisories/crawl4ai-server-side-request-forgery-via-direct-crawl-endpoints · Third Party Advisory

crawl4ai のその他の脆弱性

• CVE-2026-56260緊急 9.1Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_p…
• CVE-2026-56259高 8.2Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API cal…
• CVE-2026-56261高 7.5Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoin…
• CVE-2026-57573高 8.6Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on…
• CVE-2026-57572緊急 10.0Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_con…