CVE-2026-119122: Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check

Published Oct 29, 2026

Updated

Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API clients to bypass the egress proxy by enabling checkcachefreshness. Attackers can cache a controlled URL, then trigger CacheValidator to follow 302 redirects or DNS rebinding to internal and cloud-metadata addresses for port and service discovery.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Crawl4AI to a version that resolves this vulnerability.
Fixed in 0.9.5

Event History

Oct 29, 2026

CVE Published

via MITRE·03:58 PM

Data Sourced

via MITRE·03:58 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Crawl4AI Docker server deployments running versions before 0.9.5 are affected when API clients can enable check_cache_freshness.

What does an attacker need to exploit this issue?

The attacker needs API-client access sufficient to enable check_cache_freshness and cache a URL they control. They can then use redirects or DNS rebinding to cause requests toward internal or cloud-metadata addresses.

CVE-2026-119122: Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?