CVE-2026-109239: Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch

Q: Which deployments are exposed?

Crawl4AI versions before 0.9.4 are affected where an unauthenticated attacker can enable check_robots_txt. The issue can bypass Docker server egress controls.

Q: What can an attacker reach through this issue?

An attacker can use redirects or DNS rebinding during the robots.txt fetch to target internal addresses, loopback addresses, or cloud-metadata addresses. The disclosed impact is blind SSRF for service discovery.

Q: Is authentication or user interaction required?

No. The vulnerability is described as exploitable by unauthenticated attackers, with no user interaction required.

Published Oct 12, 2026

Updated

Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.canfetch that lets unauthenticated attackers bypass Docker server egress controls. Attackers can enable checkrobotstxt and use redirects or DNS rebinding to reach internal, loopback, or cloud-metadata addresses for service discovery.

Affected Software

1 affected component

Crawl4AI Crawl4AI<0.9.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Crawl4AI to a version that resolves this vulnerability.
Fixed in 0.9.4

Event History

Oct 12, 2026

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Crawl4AI versions before 0.9.4 are affected where an unauthenticated attacker can enable check_robots_txt. The issue can bypass Docker server egress controls.

What can an attacker reach through this issue?

An attacker can use redirects or DNS rebinding during the robots.txt fetch to target internal addresses, loopback addresses, or cloud-metadata addresses. The disclosed impact is blind SSRF for service discovery.

Is authentication or user interaction required?

No. The vulnerability is described as exploitable by unauthenticated attackers, with no user interaction required.

CVE-2026-109239: Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed?

What can an attacker reach through this issue?

Is authentication or user interaction required?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What can an attacker reach through this issue?

Is authentication or user interaction required?