CVE-2026-109238 Details
Description
Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling link_preview_config on /crawl requests. Attackers can supply a controlled page with include_external and include_patterns set, causing AsyncUrlSeeder to fetch internal, private, and cloud-metadata links and return their parsed head data.
A server-side request forgery (SSRF) vulnerability has been identified in Crawl4AI versions 0.7.0 prior to 0.9.4. This vulnerability allows API clients to access internal addresses by enabling the link_preview_config option on /crawl requests. Attackers can manipulate the request to include external links and patterns, causing the AsyncUrlSeeder component to fetch private, internal, and cloud-metadata links, returning their parsed head data to the caller.
Update Crawl4AI to version 0.9.4 or later, where this vulnerability has been patched. If an immediate update is not possible, remove the link_preview_config from incoming crawler_config bodies at the proxy, restrict the container's outbound network access, enable authentication, and limit who can access the /crawl endpoint.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 12, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-wh5w-hmj3-vgg7 | [email protected] | AdvisoryRemedyVendor |
| https://www.vulncheck.com/advisories/crawl4ai-0.7.0-before-0.9.4-ssrf-via-link-preview-config-url-seeder | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| unclecode Crawl4AI | <= 0.9.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 12, 2026 | New CVE Received | [email protected] |