PT-2026-50166 · Crawl4Ai · Crawl4Ai
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Crawl4AI versions prior to 0.8.9
Description
The Docker API server fails to apply Server-Side Request Forgery (SSRF) destination checks to proxy addresses, only validating the crawl target URL. Because the Docker API is unauthenticated by default, an unauthenticated request can specify a proxy pointing to an internal IP, allowing the browser to route traffic through it to reach internal services and cloud-metadata endpoints. This occurs via the endpoints '/crawl', '/crawl/stream', and '/crawl/job' through the following parameters and variables:
browser config.proxy config.server, browser config.proxy, crawler config.proxy config.server, and the flags --proxy-server, --proxy-pac-url, --proxy-bypass-list, and --host-resolver-rules within browser config.extra args.Recommendations
Update to version 0.8.9.
Enable authentication by configuring
CRAWL4AI API TOKEN.
Restrict the container's outbound network access using an egress firewall or by removing the metadata route.Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Crawl4Ai