CVE-2026-53755 Details
Description
Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through it, reaching internal services and cloud-metadata endpoints, while using a perfectly valid crawl URL. The Docker API is unauthenticated by default. /crawl, /crawl/stream, and /crawl/job accept a browser_config (and crawler_config). The following all feed Chromium's egress and were unchecked: browser_config.proxy_config.server, browser_config.proxy (deprecated field), crawler_config.proxy_config.server, and --proxy-server / --proxy-pac-url / --proxy-bypass-list / --host-resolver-rules flags in browser_config.extra_args. This vulnerability is fixed in 0.8.9.
A server-side request forgery (SSRF) vulnerability has been identified in Crawl4AI versions prior to 0.8.9. The issue arises in the Docker API server, which only applies its SSRF destination check to the crawl target URL, neglecting the proxy address. This oversight allows an unauthenticated request to route through a proxy pointing to an internal IP, accessing internal services and cloud metadata endpoints while using a valid crawl URL. The vulnerability is present in the '/crawl', '/crawl/stream', and '/crawl/job' endpoints, which accept 'browser_config' and 'crawler_config' that can be manipulated to bypass security checks and exploit the SSRF flaw.
Upgrade to Crawl4AI version 0.8.9 or later. If an immediate upgrade is not possible, enable authentication by setting the 'CRAWL4AI_API_TOKEN' environment variable, or restrict the container's outbound network access.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| kidocode crawl4ai | < 0.8.9 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 29, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | CVE Modified | CISA-ADP |
| Jun 23, 2026 | New CVE Received | [email protected] |