Crawl4AI versions 0.7.0 through 0.9.3 contain a server‑side request forgery flaw. When the link_preview_config feature is enabled on a /crawl request, an attacker can supply a crafted page that sets include_external and include_patterns. The AsyncUrlSeeder component then performs outbound HTTP requests to arbitrary URLs, including internal, private, and cloud‑metadata addresses. The response headers and parsed head data are returned to the attacker, allowing enumeration and potential exploitation of internal resources. This bug aligns with the CWE‑918 weakness for SSRF.

The vulnerability impacts the unclecode:crawl4ai product. Any deployment of Crawl4AI version 0.7.0 up to and including 0.9.3 is susceptible. No specific sub‑version or build information is supplied beyond the major version range.

The vulnerability has a CVSS score of 9.2, indicating high severity, and while no EPSS score is available, the lack of published exploit demonstrates a moderate risk of exploitation. The bug is not listed in the CISA KEV catalog. Attackers would need API access to the crawl endpoint and the ability to specify link_preview_config in the request; no authentication bypass is required, so the risk is scoped to exposed API endpoints. The likely attack vector is a crafted API request over an open or authenticated network channel.