CVE-2026-57571 Details
Description
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or traversal escaped the downloads directory, giving an arbitrary file write with attacker-controlled contents; the HTTP crawler path uses the response Content-Disposition filename and the browser crawler path uses the download's suggested filename. Because the written bytes are attacker-controlled, this can escalate to remote code execution. This issue is fixed in version 0.9.0.
A path traversal vulnerability has been identified in Crawl4AI, an open-source web crawler designed for large language models. This vulnerability exists in versions prior to 0.9.0 and allows for arbitrary file writes with attacker-controlled content, which can escalate to remote code execution. The issue arises because the crawler's download handlers for both HTTP and browser-based crawling do not properly sanitize filenames derived from user input. Filenames can escape the designated downloads directory, leading to unauthorized file writes. The vulnerability is present in the HTTP crawler's handling of the 'Content-Disposition' header and the browser crawler's use of suggested filenames from downloaded files.
Users can upgrade to Crawl4AI version 0.9.0, where this vulnerability has been fixed. Alternatively, the crawler can be run as an unprivileged user with a separate, isolated downloads directory, or with authentication enabled on the Docker server.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 7, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/unclecode/crawl4ai/commit/60886d1a0c52682e4c83a7cef9dfac417fff6bd2 | [email protected] | Patch |
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-2jq4-q6vv-4cp3 | [email protected] | MitigationVendor AdvisoryExploit |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-59 | Improper Link Resolution Before File Access ('Link Following') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| kidocode crawl4ai | < 0.9.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 7, 2026 | Initial Analysis | [email protected] |
| Jul 7, 2026 | CVE Modified | CISA-ADP |
| Jul 6, 2026 | New CVE Received | [email protected] |