CVE-2026-109238: Server-Side Request Forgery (SSRF) in unclecode crawl4ai

CVE-2026-109238 is a server-side request forgery vulnerability in unclecode's Crawl4AI product affecting versions from 0.7.0 up to 0.9.4. The vulnerability arises when the link_preview_config option is enabled on /crawl API requests. By supplying a crafted page with include_external and include_patterns parameters, an attacker can cause the AsyncUrlSeeder to fetch internal, private, and cloud metadata URLs. The server then returns parsed head data from these internal resources, potentially exposing sensitive internal information.

An unauthenticated attacker can exploit this SSRF vulnerability to make the Crawl4AI server perform HTTP requests to internal network addresses, private IP ranges, and cloud metadata services. This can lead to unauthorized disclosure of sensitive internal information that is normally inaccessible externally. The CVSS 4.0 base score is 9.2 (critical), indicating a high-severity impact with network vector, no privileges or user interaction required, and high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's advisories for updates. Until a fix is available, disabling the link_preview_config feature on /crawl requests or restricting access to the API may reduce exposure.