Crawl4AI versions prior to 0.8.8 expose their screenshot and PDF endpoints to unauthenticated attackers who can supply a specially crafted output_path. By using a symlink that points outside the intended directory together with a time-of-check-time-of-use race the attacker can cause the application to write arbitrary files at any location the runtime user can access. If the target directory contains executable or cron scripts the attacker can gain arbitrary code execution. The flaw therefore results in confidentiality loss, integrity compromise, and the potential for full system compromise.

The vulnerability affects Crawl4AI, all versions older than 0.8.8, on the screenshot and PDF endpoints. It can be triggered by unauthenticated attackers.

The CVSS score of 9.2 indicates Critical severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can reach the vulnerable code remotely via HTTP requests to the screenshot or PDF endpoints. No authentication is required. The attack path relies on insufficient path validation, symlink following, and a TOCTOU race, making exploitation relatively straightforward for automated tools.