High severity · published Jul 10, 2026
CVE-2026-56261
Crawl4AI - Server-Side Request Forgery via Webhook URLs
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crawl4AI · Crawl4AI
before 0.8.7 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-56261
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-56261
Product
https://github.com/unclecode/crawl4ai
Mitigation
https://github.com/unclecode/crawl4ai/security/advisories/GHSA-365w-hqf6-vxfg
Product
https://www.vulncheck.com/advisories/crawl4ai-server-side-request-forgery-via-webhook-urls
More from Crawl4AI
9.8
CVE-2026-56265
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
9.1
CVE-2026-56260
Crawl4AI - Arbitrary File Write via output_path Parameter
8.6
CVE-2026-56266
Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
8.2
CVE-2026-56259
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
8.1
CVE-2026-56258
Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU