Description
Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.can_fetch that lets unauthenticated attackers bypass Docker server egress controls. Attackers can enable check_robots_txt and use redirects or DNS rebinding to reach internal, loopback, or cloud-metadata addresses for service discovery.
Published: 2026-10-12
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Server‑side request forgery allowing access to internal resources
Action: Patch promptly
AI Analysis

Impact

Crawl4AI versions prior to 0.9.4 have a blind SSRF flaw in the RobotsParser.can_fetch routine. An unauthenticated attacker can supply a crafted robots.txt URL, enabling the crawler to reach arbitrary internal or cloud‑metadata addresses. This can expose sensitive information or enable further lateral movement without authentication. The weakness is classified as CWE‑918 for SSRF.

Affected Systems

The vulnerability affects the Crawl4AI project from the unclecode organization. Any installation running a version older than 0.9.4 is susceptible. Versions 0.9.4 and later contain a fix that disables the vulnerable behavior.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog. Attackers likely need to direct the crawler to a maliciously controlled robots.txt file and craft redirects or DNS rebinding tricks to reach target internal services. Successful exploitation would allow the attacker to access internal services, gather sensitive information, and potentially compromise the confidentiality of those resources.

Generated by OpenCVE AI on October 12, 2026 at 19:47 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Crawl4AI to version 0.9.4 or newer to eliminate the SSRF flaw
  • If an upgrade is not immediately possible, configure the crawler to disable the check_robots_txt feature or restrict its ability to resolve external hosts
  • Apply network segmentation or firewall rules that block outbound traffic from the crawler process to internal, loopback, or metadata service addresses

Generated by OpenCVE AI on October 12, 2026 at 19:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Unclecode
Unclecode crawl4ai
Vendors & Products Unclecode
Unclecode crawl4ai

Mon, 12 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Description Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.can_fetch that lets unauthenticated attackers bypass Docker server egress controls. Attackers can enable check_robots_txt and use redirects or DNS rebinding to reach internal, loopback, or cloud-metadata addresses for service discovery.
Title Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Unclecode Crawl4ai
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-13T16:57:08.639Z

Reserved: 2026-10-12T14:07:56.520Z

Link: CVE-2026-109239

cve-icon Vulnrichment

Updated: 2026-10-13T16:22:17.867Z

cve-icon NVD

Status : Deferred

Published: 2026-10-12T17:17:14.570

Modified: 2026-10-16T19:18:44.867

Link: CVE-2026-109239

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T20:00:15Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)