CVE-2026-115508GHSA-j843-8p47-rhxp
Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields
unclecode crawl4ai
CVSS
7.1HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.30%Chance of exploitation activity in the next 30 days, higher than 22% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 0.9.5crawl4aiCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via RegexExtractionStrategy.custom, RegexChunking.patterns or JsonCss, JsonXPath and JsonLxml schema regex fields against a crafted page to freeze the entire server, including /health.
Text from CVE List
Affected versions 2
- crawl4aiaffected: 0.7.0 before 0.9.5CVE List
- crawl4aiunaffected: 0.9.5CVE List
References 5
- github.com/unclecode/crawl4ai/commit/8aea2006e2cdb96a185e50b20633fc323dff6429Fixvia CVE List
- github.com/unclecode/crawl4ai/releases/tag/v0.9.5Fixvia CVE List
- github.com/unclecode/crawl4ai/security/advisories/GHSA-j843-8p47-rhxpAdvisoryvia CVE List
- vulncheck.com/advisories/crawl4ai-0.7.0-before-0.9.5-redos-via-crawl-regex-fieldsAdvisoryvia CVE List
- github.com/unclecode/crawl4aiReferencevia CVE List