CVE-2026-56258 json
Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU
published 2026-06-16 4 mo ago modified 2026-07-21 3 mo ago also GHSA-7cx2-g3h9-382p , PYSEC-2026-228 , EUVD-2026-38432
- cvss
- 8.1
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 60%
- public exploits
- 0
- none known
Summary
Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink and time-of-check-time-of-use (TOCTOU) attacks on the output_path parameter. Remote attackers can exploit insufficient path validation and symlink following to achieve arbitrary file write and potential code execution on systems where the runtime user has write access to executable or cron locations.
Patch / fix
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 4 mo ago
Exploit prediction
0.91% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 9.2 | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 9.2 | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| GitHub | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | crawl4ai | <0.8.8 |
0.8.8 |
Affected products
- Crawl4AI Crawl4AI
Classification
References
-
github.com
/unclecode/crawl4ai/pull/3
web
-
github.com
/unclecode/crawl4ai/security/advisories/GHSA-7cx2-g3h9-382p
vendor-advisory, web, third-party-advisory, advisory
-
vulncheck.com
/advisories/crawl4ai-arbitrary-file-write-via-output-path-symlink-and-toctou
third-party-advisory, web, advisory
-
github.com
/unclecode/crawl4ai/issues/1
web
-
github.com
/unclecode/crawl4ai/issues/2
web
-
github.com
/pypa/advisory-database/tree/main/vulns/crawl4ai/PYSEC-2026-228.yaml
web
-
github.com
/unclecode/crawl4ai
package
Sources
- CVE List CVE-2026-56258
- GitHub Advisory GHSA-7cx2-g3h9-382p
- NVD CVE-2026-56258
- OSV PYSEC-2026-228
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.