CVE-2026-26217: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in unclecode Crawl4AI
Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing unauthenticated remote attackers to read arbitrary files from the server filesystem. An attacker can access sensitive files such as /etc/passwd, /etc/shadow, application configuration files, and environment variables via /proc/self/environ, potentially exposing credentials, API keys, and internal application structure.
AI Analysis
Technical Summary
CVE-2026-26217 is a path traversal vulnerability (CWE-22) in unclecode's Crawl4AI product affecting versions prior to 0.8.0. The flaw exists in the Docker API deployment where certain endpoints (/execute_js, /screenshot, /pdf, /html) accept file:// URLs without proper validation, enabling unauthenticated remote attackers to perform local file inclusion. This allows attackers to read arbitrary files on the server, potentially exposing sensitive information such as system password files and environment variables.
Potential Impact
Successful exploitation allows unauthenticated remote attackers to read arbitrary files on the server hosting Crawl4AI. This can lead to exposure of sensitive system files (/etc/passwd, /etc/shadow), application configuration files, and environment variables containing credentials and API keys. The confidentiality of the server and application data is severely compromised.
Mitigation Recommendations
No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to the affected endpoints and avoid exposing the Docker API deployment to untrusted networks. Monitor vendor communications for updates on patches or mitigations.
CVE-2026-26217: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in unclecode Crawl4AI
Description
Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /pdf, and /html endpoints accept file:// URLs, allowing unauthenticated remote attackers to read arbitrary files from the server filesystem. An attacker can access sensitive files such as /etc/passwd, /etc/shadow, application configuration files, and environment variables via /proc/self/environ, potentially exposing credentials, API keys, and internal application structure.
CVSS v4.0
Score 9.2critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-26217 is a path traversal vulnerability (CWE-22) in unclecode's Crawl4AI product affecting versions prior to 0.8.0. The flaw exists in the Docker API deployment where certain endpoints (/execute_js, /screenshot, /pdf, /html) accept file:// URLs without proper validation, enabling unauthenticated remote attackers to perform local file inclusion. This allows attackers to read arbitrary files on the server, potentially exposing sensitive information such as system password files and environment variables.
Potential Impact
Successful exploitation allows unauthenticated remote attackers to read arbitrary files on the server hosting Crawl4AI. This can lead to exposure of sensitive system files (/etc/passwd, /etc/shadow), application configuration files, and environment variables containing credentials and API keys. The confidentiality of the server and application data is severely compromised.
Mitigation Recommendations
No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to the affected endpoints and avoid exposing the Docker API deployment to untrusted networks. Monitor vendor communications for updates on patches or mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-02-11T20:08:07.944Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 698df67cc9e1ff5ad8e8871a
Added to database: 02/12/2026, 15:49:16 UTC
Last enriched: 06/24/2026, 15:06:30 UTC
Last updated: 07/10/2026, 19:47:31 UTC
Views: 406
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.