Crawl4AI vulnerability coverage has moved to the consolidated article
A critical flaw lets attackers take over a server without logging in, found in Crawl4AI, the popular tool that feeds web pages into AI. Rated CVSS 9.8, the self-hosted Docker edition baked the 'master key' used to verify users into the product, so anyone can impersonate an administrator. A fix, 0.8.7, is out; if you self-host, update urgently.
Table of contents
A critical flaw lets attackers take over a server without logging in, found in Crawl4AI, the popular tool that feeds web pages into AI. Rated CVSS 9.8, the self-hosted Docker edition baked the 'master key' used to verify users into the product, so anyone can impersonate an administrator. A fix, 0.8.7, is out; if you self-host, update urgently.
Coverage of the Crawl4AI vulnerabilities this article discussed (CVE-2026-56265, 57571, 57572, 57573 and more) has been consolidated into the single article tracking all Crawl4AI vulnerabilities. See that article for current status, safe versions, and what to do.
In short: Crawl4AI before 0.9.0 (especially exposed Docker API server setups) carries several critical flaws, including unauthenticated command execution (CVE-2026-57572, CVSS 10.0). Updating to the latest 0.9.2 or later closes them all.
Makoto Horikawa
Backend Engineer / AWS / Django