CVE-2026-112363 Details
Description
Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so SSLCertificate.from_url connects to internal hosts on port 443, probing reachability and leaking certificate details.
A server-side request forgery (SSRF) vulnerability has been identified in Crawl4AI versions 0.8.7 prior to 0.9.5. This vulnerability resides in the Docker API server, where unauthenticated attackers can exploit differences in URL userinfo parsing to bypass destination checks. By crafting specific userinfo URLs and setting fetch_ssl_certificate to true, attackers can manipulate the SSLCertificate.from_url function to connect to internal hosts on port 443. This not only probes the reachability of these hosts but also leaks sensitive SSL certificate details.
Users are advised to update to Crawl4AI version 0.9.5 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Crawl4AI | >= 0.8.7, <= 0.9.5 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |