CVE-2026-26216: Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The import builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Crawl4AIto a version that resolves this vulnerability.Fixed in 0.8.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26216?
CVE-2026-26216 is classified as a critical vulnerability due to its potential for unauthenticated remote code execution.
How do I fix CVE-2026-26216?
To mitigate CVE-2026-26216, upgrade to Crawl4AI version 0.8.0 or later where this vulnerability has been resolved.
What is the impact of CVE-2026-26216?
CVE-2026-26216 allows attackers to execute arbitrary Python code on the server via the Docker API's hooks parameter.
Who is affected by CVE-2026-26216?
CVE-2026-26216 affects all versions of Crawl4AI prior to 0.8.0.
What components are involved in CVE-2026-26216?
CVE-2026-26216 involves the Docker API of the Crawl4AI software, specifically the /crawl endpoint.