CVE-2026-26216 json
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
published 2026-01-16 9 mo ago modified 2026-11-08 26 h ago also EUVD-2026-6690 , GHSA-5882-5rx9-xgxp , PYSEC-2026-33
- cvss
- 10.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.3%
- EPSS 6.3% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
Patch / fix
- pypi crawl4ai 0.8.0
- unclecode Crawl4AI 0.8.0
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 8 mo ago
Exploit prediction
6.33% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Nuclei template Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 10.0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
| CNA | 3.1 | 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| CNA | 4.0 | 10.0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| OSV | 3.1 | 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | crawl4ai | <0.8.0 |
0.8.0 |
Affected products
- unclecode Crawl4AI
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
github.com
/unclecode/crawl4ai/security/advisories/GHSA-5882-5rx9-xgxp
vendor-advisory, web, mitigation, advisory
-
github.com
/unclecode/crawl4ai/blob/main/docs/blog/release-v0.8.0.md
release-notes, web, advisory
-
vulncheck.com
/advisories/crawl4ai-docker-api-unauthenticated-remote-code-execution-via-hooks-parameter
third-party-advisory, web, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-26216
advisory
-
github.com
/pypa/advisory-database/tree/main/vulns/crawl4ai/PYSEC-2026-33.yaml
web
-
github.com
/unclecode/crawl4ai
package
-
github.com
/unclecode/crawl4ai/blob/release/v0.8.0/docs/blog/release-v0.8.0.md
web
-
github.com
/unclecode/crawl4ai/blob/release/v0.8.0/docs/migration/v0.8.0-upgrade-guide.md
web
Sources
- CVE List CVE-2026-26216
- GitHub Advisory GHSA-5882-5rx9-xgxp
- NVD CVE-2026-26216
- OSV PYSEC-2026-33
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.