crawl4ai Multiple High-Severity Vulnerabilities: SSRF, RCE, XSS, Auth Bypass

Vulnerability Overview The provided screenshot describes multiple Docker API vulnerabilities within the package, including arbitrary file write, SSRF (Server-Side Request Forgery), authentication bypass, XSS (Cross-Site Scripting), and arbitrary JavaScript execution. Affected Versions Affected Versions: version <= 0.8.6 Fixed Version: version 0.8.7 Remediation Measures 1. Arbitrary File Write (CVE-22, CVSS 9.1) - Issue: The parameter accepts arbitrary file system paths without validation. - Fix: Added to restrict writes to the (defaulting to ). Added Pydantic to report traversal sequences. 2. SSRF via Webhook URLs (CVE-918, CVSS 8.6) - Issue: Webhook URLs in and accept internal/private IPs without validation, leading to SSRF. - Fix: Added using a blacklist of RFC 1918 addresses, loopback, link-local, cloud metadata IPs, and hostnames. Validation is performed at both job submission and sending stages. Set . 3. Authentication Bypass on Monitoring Endpoints (CVE-306, CVSS 6.9) - Issue: The monitoring router was mounted without the dependency, allowing unauthenticated access to all monitoring endpoints, including destructive ones like . - Fix: Added to the monitoring router. Added explicit token checks to the WebSocket endpoint. 4. Stored XSS in Monitoring Dashboard (CVE-79, CVSS 6.1) - Issue: URLs and error messages in the monitoring dashboard were rendered via without escaping, allowing stored XSS through crafted crawl URLs. - Fix: Applied server-side to URLs and error messages upon storage. Applied a client-side wrapper to all template injections. 5. Arbitrary JavaScript Execution via execute_js (CVE-94, CVSS 8.1) - Issue: The endpoint accepts and executes arbitrary JavaScript in the server browser, which runs with . This, combined with SSRF capabilities, allows significant abuse. - Fix: Disabled by default. Added an SSRF blacklist to target URLs. Removed from the default browser arguments. 6. Hardcoded JWT Secret (CVE-798, CVSS 9.8) - Issue: The JWT signing key defaults to in public source code, allowing anyone to forge valid authentication tokens. - Fix: Removed the default value. Added startup validation to reject weak keys. Automatically generate a temporary key when JWT is enabled but no key is explicitly set. 7. SSRF via Direct Crawl Endpoints (CVE-918, CVSS 8.6) - Issue: Primary crawl endpoints ( , , , ) accept user-supplied URLs without destination validation, leading to SSRF. - Fix: Added URL destination validation to all crawl/md/llm input endpoints, reusing the SSRF blacklist (RFC 1918, loopback, link-local, cloud metadata IPs, and hostnames). IPv6-mapped IPv4 addresses are normalized to IPv4 format before blacklist checks to prevent bypass via mapping. URLs starting with are skipped. Validation is performed at the request entry point, not just during fetching. Workarounds 1. Upgrade to the patched version (Recommended) 2. Set to enable authentication 3. Set a strong (at least 32 characters) if using JWT 4. Restrict network access to the Docker API Credits Jeongbean Jeon - File Write, SSRF, Monitoring Auth Bypass, Stored XSS wuluncha - File Write via (Independent Report) by111 (August829) - Hardcoded JWT, in , Hook Sandbox Escape secsys_codex - SSRF via , , endpoints + IPv6-mapped IPv4 bypass (URL Destination Validation) Yelipuran Sankara (Linkedin) - SSRF due to missing host validation in (Independent Report) iclyDun & Yashon - SSRF, Arbitrary File Write, Missing Default Auth, Hook Sandbox Bypass via asyncio (Independent Report) Key Information Summary Vulnerability Overview: Multiple severe security vulnerabilities exist in the package, including file write, SSRF, authentication bypass, XSS, and arbitrary JS execution. Affected Versions: Affected versions are <= 0.8.6; the fixed version is 0.8.7. Remediation: Remediation is achieved by upgrading to the patched version, setting strong keys, enabling authentication, and restricting network access.

Goal Reached Thanks to every supporter — we hit 100%!

crawl4ai Multiple High-Severity Vulnerabilities: SSRF, RCE, XSS, Auth Bypass

More from this source