Skip to content
Threat Feed
Subscribe

Product

Crawl4ai (<= 0.8.9)

2 briefs RSS
high advisory

Crawl4AI Unauthenticated SSRF in Docker API `crawl/stream` Endpoint

A remote, unauthenticated attacker can exploit an unpatched Server-Side Request Forgery (SSRF) vulnerability in Crawl4AI Docker API versions up to 0.8.9, specifically targeting the `/crawl/stream` endpoint, to read internal network services and cloud-metadata endpoints, potentially exposing sensitive information like IAM credentials.

crawl4ai ssrf web-application docker unauthenticated api-exploitation
2r 3t
critical advisory

Crawl4AI Unauthenticated RCE via Chromium Launch-Argument Injection

An attacker can achieve unauthenticated remote code execution (RCE) in Crawl4AI Docker deployments by injecting malicious Chromium launch arguments, such as `--utility-cmd-prefix` and `--no-zygote`, into the `browser_config.extra_args` field of the API request, allowing for arbitrary command execution as the container's runtime user.

crawl4ai RCE web-vulnerability Chromium container Docker Linux
3r 2t