CVE-2026-112363: Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo
Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetchsslcertificate=true with crafted userinfo URLs so SSLCertificate.fromurl connects to internal hosts on port 443, probing reachability and leaking certificate details.
Affected Software
Event History
Frequently Asked Questions
Which deployments are realistically exposed?
Deployments running the Crawl4AI Docker API server are exposed if unauthenticated attackers can submit crawl requests that use the SSL-certificate fetching option.
What must an attacker provide to trigger the issue?
The attacker sets fetch_ssl_certificate=true and supplies a crafted URL containing userinfo. Parsing differences allow SSLCertificate.from_url to connect to an internal host on port 443 despite destination checks.
What can an attacker learn through successful exploitation?
An attacker can probe whether internal hosts are reachable on port 443 and obtain certificate details from those hosts. The provided data does not indicate integrity or availability impact.