CVE-2026-56259 Details
Description
Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by supplying a malicious base_url parameter and setting api_token to env:VARIABLE_NAME to exfiltrate provider API keys and server secrets including JWT SECRET_KEY for authentication bypass.
A credential exfiltration vulnerability has been identified in Crawl4AI versions prior to 0.8.8, specifically within the Docker API server. This vulnerability allows attackers to redirect LLM API calls to endpoints they control and to read arbitrary environment variables. Exploitation is possible through the unauthenticated /md, /llm, and /llm/job endpoints by injecting a malicious base_url parameter and setting the api_token to env:VARIABLE_NAME. This method can be used to exfiltrate provider API keys and sensitive server secrets, including the JWT SECRET_KEY, which can bypass authentication.
Users are advised to upgrade to Crawl4AI version 0.8.8 or later. Additionally, enable authentication by setting the CRAWL4AI_API_TOKEN environment variable, and avoid placing sensitive secrets in the server environment alongside provider keys.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-f989-c77f-r2cq | [email protected] | Vendor AdvisoryMitigation |
| https://www.vulncheck.com/advisories/crawl4ai-llm-credential-exfiltration-via-base-url-and-environment-variable-resolution | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| kidocode crawl4ai | < 0.8.8 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | Initial Analysis | [email protected] |
| Jul 14, 2026 | CVE Modified | CISA-ADP |
| Jul 12, 2026 | New CVE Received | [email protected] |