CVE-2026-119122— Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check

Quick assessment

Affected

unclecode crawl4ai

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Crawl4AI 在 0.9.5 之前的版本中，其 Docker 服务器存在一个盲型服务器端请求伪造（SSRF）漏洞。当启用功能时，API 客户端可借此绕过出站代理。攻击者可以缓存一个受控的 URL，随后触发组件跟随 302 重定向或利用 DNS 重绑定技术，访问内部网络地址及云元数据地址，从而进行端口和服务发现。

CVSS 5.3 · Medium Updated Oct 30, 2026

Possible ATT&CK Techniques 2 AI

T1071.001 · Web Protocols T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check

Source: CVE Program / CVE List V5

Vulnerability Description

Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API clients to bypass the egress proxy by enabling check_cache_freshness. Attackers can cache a controlled URL, then trigger CacheValidator to follow 302 redirects or DNS rebinding to internal and cloud-metadata addresses for port and service discovery.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
unclecode	crawl4ai	0 ~ 0.9.5	-

II. Public POCs for CVE-2026-119122

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119122

请登录查看更多情报信息。

Other References for CVE-2026-119122 (2)

https://github.com/unclecode/crawl4ai/security/advisories/GHSA-w4xc-px5p-c32w vendor-advisory
https://www.vulncheck.com/advisories/crawl4ai-before-0.9.5-blind-ssrf-via-cachevalidator-freshness-check third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-119122

Same Patch Batch · unclecode · 2026-10-29 · 5 CVEs total

CVE-2026-119119	7.5 HIGH	Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields
CVE-2026-119120	7.5 HIGH	Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name
CVE-2026-119118	6.5 MEDIUM	Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags
CVE-2026-119121	4.3 MEDIUM	Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for

IV. Related Vulnerabilities

Same product: crawl4ai

Same vendor: unclecode

Same weakness: CWE-918