All vulnerabilities
CVE-2026-109238GHSA-wh5w-hmj3-vgg7

Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder

unclecode crawl4ai
Open in ThreatlineRecord JSON
CVSS
9.2Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.30%Chance of exploitation activity in the next 30 days, higher than 21% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0.9.4Fixed versionCVE List
Published12 Oct 2026Updated 13 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling link_preview_config on /crawl requests. Attackers can supply a controlled page with include_external and include_patterns set, causing AsyncUrlSeeder to fetch internal, private, and cloud-metadata links and return their parsed head data.

Text from CVE List

Affected versions 2

  • crawl4aiaffected: 0.7.0 before 0.9.4CVE List
  • crawl4aiunaffected: 0.9.4CVE List

References 2