CVE-2026-112363: Server-Side Request Forgery (SSRF) in unclecode crawl4ai

The vulnerability exists in crawl4ai versions 0.8.7 through 0.9.5, where the Docker API server's destination checks can be bypassed due to differences in URL userinfo parsing. By crafting userinfo URLs with fetch_ssl_certificate=true, an unauthenticated attacker can cause SSLCertificate.from_url to connect to internal hosts on port 443. This enables probing of internal network reachability and leakage of SSL certificate information.

An unauthenticated attacker can exploit this SSRF vulnerability to bypass destination restrictions and connect to internal hosts on port 443. This allows the attacker to probe internal network reachability and obtain SSL certificate details from internal services. The CVSS 4.0 base score is 6.9, indicating a medium severity impact with network attack vector, low complexity, no privileges or user interaction required, and low confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to the Docker API server and monitor for suspicious requests that exploit URL userinfo parsing. Avoid exposing the vulnerable versions of crawl4ai to untrusted networks.