C
Crawl4AI
Security Risk Profile
61
/100
highSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 18, 2025 to present
7
Total CVEs
5
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
61/100
high
Severity Distribution
Critical
3High
2Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
2
Infoleak
1
3
Code Injection
1
4
XSS
1
5
SSRF
1
Most Affected Products
1. Kidocode Crawl4ai7
2. Crawl4AI Crawl4AI6
3. Crawl4AI Docker API server1
4. pip/Crawl4AI1
Recent Vulnerabilities
See more →CVE-2026-56260
CVSS 8.8high
Crawl4AI - Arbitrary File Write via output_path Parameter
Jul 12, 2026🔧 No Patch
CVE-2026-56259
CVSS 8.8high
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
Jul 12, 2026🔧 No Patch
CVE-2026-56264
CVSS 9.2critical
Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint
Jun 30, 2026🔧 No Patch
CVE-2026-56262
CVSS 6.9medium
Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server
Jun 24, 2026🔧 No Patch
CVE-2026-56263
CVSS 5.3medium
Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard
Jun 23, 2026🔧 No Patch
CVE-2026-56265
CVSS 9.3critical
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
Jun 21, 2026🔧 No Patch
CVE-2025-28197
CVSS 9.1critical
Apr 18, 2025🔧 No Patch
Monitor Crawl4AI in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.