CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57573

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handle_stream_crawl_request passed seed URLs straight to the crawler with no destination validation, allowing a remote unauthenticated client to call POST /crawl/stream or POST /crawl with crawler_config.stream=true with a URL pointing at an internal, private, or link-local address; the server fetched it and streamed the response body back. This issue is fixed in version 0.9.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 17.6%

CVSS Severity

CVSS v3 Score 8.6

References

Products affected by CVE-2026-57573

Kidocode » Crawl4ai » Version: 0.1.0

cpe:2.3:a:kidocode:crawl4ai:0.1.0
Kidocode » Crawl4ai » Version: 0.2.0

cpe:2.3:a:kidocode:crawl4ai:0.2.0
Kidocode » Crawl4ai » Version: 0.2.1

cpe:2.3:a:kidocode:crawl4ai:0.2.1
Kidocode » Crawl4ai » Version: 0.2.2

cpe:2.3:a:kidocode:crawl4ai:0.2.2
Kidocode » Crawl4ai » Version: 0.2.4

cpe:2.3:a:kidocode:crawl4ai:0.2.4
Kidocode » Crawl4ai » Version: 0.2.6

cpe:2.3:a:kidocode:crawl4ai:0.2.6
Kidocode » Crawl4ai » Version: 0.2.7

cpe:2.3:a:kidocode:crawl4ai:0.2.7
Kidocode » Crawl4ai » Version: 0.2.71

cpe:2.3:a:kidocode:crawl4ai:0.2.71
Kidocode » Crawl4ai » Version: 0.2.72

cpe:2.3:a:kidocode:crawl4ai:0.2.72
Kidocode » Crawl4ai » Version: 0.2.73

cpe:2.3:a:kidocode:crawl4ai:0.2.73
Kidocode » Crawl4ai » Version: 0.2.74

cpe:2.3:a:kidocode:crawl4ai:0.2.74
Kidocode » Crawl4ai » Version: 0.2.77

cpe:2.3:a:kidocode:crawl4ai:0.2.77
Kidocode » Crawl4ai » Version: 0.3.0

cpe:2.3:a:kidocode:crawl4ai:0.3.0
Kidocode » Crawl4ai » Version: 0.3.3

cpe:2.3:a:kidocode:crawl4ai:0.3.3
Kidocode » Crawl4ai » Version: 0.3.6

cpe:2.3:a:kidocode:crawl4ai:0.3.6
Kidocode » Crawl4ai » Version: 0.3.745

cpe:2.3:a:kidocode:crawl4ai:0.3.745
Kidocode » Crawl4ai » Version: 0.3.746

cpe:2.3:a:kidocode:crawl4ai:0.3.746
Kidocode » Crawl4ai » Version: 0.4.24

cpe:2.3:a:kidocode:crawl4ai:0.4.24
Kidocode » Crawl4ai » Version: 0.4.243

cpe:2.3:a:kidocode:crawl4ai:0.4.243
Kidocode » Crawl4ai » Version: 0.4.247

cpe:2.3:a:kidocode:crawl4ai:0.4.247
Kidocode » Crawl4ai » Version: 0.5.0

cpe:2.3:a:kidocode:crawl4ai:0.5.0
Kidocode » Crawl4ai » Version: 0.6.0

cpe:2.3:a:kidocode:crawl4ai:0.6.0
Kidocode » Crawl4ai » Version: 0.6.3

cpe:2.3:a:kidocode:crawl4ai:0.6.3
Kidocode » Crawl4ai » Version: 0.7.0

cpe:2.3:a:kidocode:crawl4ai:0.7.0
Kidocode » Crawl4ai » Version: 0.7.1

cpe:2.3:a:kidocode:crawl4ai:0.7.1
Kidocode » Crawl4ai » Version: 0.7.2

cpe:2.3:a:kidocode:crawl4ai:0.7.2
Kidocode » Crawl4ai » Version: 0.7.3

cpe:2.3:a:kidocode:crawl4ai:0.7.3
Kidocode » Crawl4ai » Version: 0.7.4

cpe:2.3:a:kidocode:crawl4ai:0.7.4
Kidocode » Crawl4ai » Version: 0.7.5

cpe:2.3:a:kidocode:crawl4ai:0.7.5
Kidocode » Crawl4ai » Version: 0.7.6

cpe:2.3:a:kidocode:crawl4ai:0.7.6
Kidocode » Crawl4ai » Version: 0.7.7

cpe:2.3:a:kidocode:crawl4ai:0.7.7
Kidocode » Crawl4ai » Version: 0.7.8

cpe:2.3:a:kidocode:crawl4ai:0.7.8
Kidocode » Crawl4ai » Version: 0.8.0

cpe:2.3:a:kidocode:crawl4ai:0.8.0
Kidocode » Crawl4ai » Version: 0.8.5

cpe:2.3:a:kidocode:crawl4ai:0.8.5
Kidocode » Crawl4ai » Version: 0.8.6

cpe:2.3:a:kidocode:crawl4ai:0.8.6
Kidocode » Crawl4ai » Version: 0.8.7

cpe:2.3:a:kidocode:crawl4ai:0.8.7
Kidocode » Crawl4ai » Version: 0.8.8

cpe:2.3:a:kidocode:crawl4ai:0.8.8
Kidocode » Crawl4ai » Version: 0.8.9

cpe:2.3:a:kidocode:crawl4ai:0.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57573

Products

Pricing

Contact Us