High severity · published Oct 29, 2026
CVE-2026-119119
Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields
New
7.5
CVSS
–
EPSS
No
On KEV
Description
Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_before_return_html, mean_delay, and max_range fields of untrusted CrawlerRunConfig bodies. Unauthenticated attackers can send huge values to /crawl or /crawl/stream to hold browser pages or stall the rate limiter, exhausting the page pool and blocking other crawls.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
crawl4ai · unclecode
before 0.9.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-119119
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-119119
vendor-advisory
https://github.com/unclecode/crawl4ai/security/advisories/GHSA-rhjm-7hj7-75fx
third-party-advisory
https://www.vulncheck.com/advisories/crawl4ai-before-0.9.5-denial-of-service-via-unbounded-crawlerrunconfig-delay-fields
More from crawl4ai
10.0
CVE-2026-57572
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
10.0
CVE-2026-53753
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
10.0
CVE-2026-26216
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
9.6
CVE-2026-57571
Crawl4AI arbitrary file write via download filename path traversal
8.6
CVE-2026-109238
Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder