CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57571

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or traversal escaped the downloads directory, giving an arbitrary file write with attacker-controlled contents; the HTTP crawler path uses the response Content-Disposition filename and the browser crawler path uses the download's suggested filename. Because the written bytes are attacker-controlled, this can escalate to remote code execution. This issue is fixed in version 0.9.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 38.1%

CVSS Severity

CVSS v3 Score 9.6

References

Products affected by CVE-2026-57571

Kidocode » Crawl4ai » Version: 0.1.0

cpe:2.3:a:kidocode:crawl4ai:0.1.0
Kidocode » Crawl4ai » Version: 0.2.0

cpe:2.3:a:kidocode:crawl4ai:0.2.0
Kidocode » Crawl4ai » Version: 0.2.1

cpe:2.3:a:kidocode:crawl4ai:0.2.1
Kidocode » Crawl4ai » Version: 0.2.2

cpe:2.3:a:kidocode:crawl4ai:0.2.2
Kidocode » Crawl4ai » Version: 0.2.4

cpe:2.3:a:kidocode:crawl4ai:0.2.4
Kidocode » Crawl4ai » Version: 0.2.6

cpe:2.3:a:kidocode:crawl4ai:0.2.6
Kidocode » Crawl4ai » Version: 0.2.7

cpe:2.3:a:kidocode:crawl4ai:0.2.7
Kidocode » Crawl4ai » Version: 0.2.71

cpe:2.3:a:kidocode:crawl4ai:0.2.71
Kidocode » Crawl4ai » Version: 0.2.72

cpe:2.3:a:kidocode:crawl4ai:0.2.72
Kidocode » Crawl4ai » Version: 0.2.73

cpe:2.3:a:kidocode:crawl4ai:0.2.73
Kidocode » Crawl4ai » Version: 0.2.74

cpe:2.3:a:kidocode:crawl4ai:0.2.74
Kidocode » Crawl4ai » Version: 0.2.77

cpe:2.3:a:kidocode:crawl4ai:0.2.77
Kidocode » Crawl4ai » Version: 0.3.0

cpe:2.3:a:kidocode:crawl4ai:0.3.0
Kidocode » Crawl4ai » Version: 0.3.3

cpe:2.3:a:kidocode:crawl4ai:0.3.3
Kidocode » Crawl4ai » Version: 0.3.6

cpe:2.3:a:kidocode:crawl4ai:0.3.6
Kidocode » Crawl4ai » Version: 0.3.745

cpe:2.3:a:kidocode:crawl4ai:0.3.745
Kidocode » Crawl4ai » Version: 0.3.746

cpe:2.3:a:kidocode:crawl4ai:0.3.746
Kidocode » Crawl4ai » Version: 0.4.24

cpe:2.3:a:kidocode:crawl4ai:0.4.24
Kidocode » Crawl4ai » Version: 0.4.243

cpe:2.3:a:kidocode:crawl4ai:0.4.243
Kidocode » Crawl4ai » Version: 0.4.247

cpe:2.3:a:kidocode:crawl4ai:0.4.247
Kidocode » Crawl4ai » Version: 0.5.0

cpe:2.3:a:kidocode:crawl4ai:0.5.0
Kidocode » Crawl4ai » Version: 0.6.0

cpe:2.3:a:kidocode:crawl4ai:0.6.0
Kidocode » Crawl4ai » Version: 0.6.3

cpe:2.3:a:kidocode:crawl4ai:0.6.3
Kidocode » Crawl4ai » Version: 0.7.0

cpe:2.3:a:kidocode:crawl4ai:0.7.0
Kidocode » Crawl4ai » Version: 0.7.1

cpe:2.3:a:kidocode:crawl4ai:0.7.1
Kidocode » Crawl4ai » Version: 0.7.2

cpe:2.3:a:kidocode:crawl4ai:0.7.2
Kidocode » Crawl4ai » Version: 0.7.3

cpe:2.3:a:kidocode:crawl4ai:0.7.3
Kidocode » Crawl4ai » Version: 0.7.4

cpe:2.3:a:kidocode:crawl4ai:0.7.4
Kidocode » Crawl4ai » Version: 0.7.5

cpe:2.3:a:kidocode:crawl4ai:0.7.5
Kidocode » Crawl4ai » Version: 0.7.6

cpe:2.3:a:kidocode:crawl4ai:0.7.6
Kidocode » Crawl4ai » Version: 0.7.7

cpe:2.3:a:kidocode:crawl4ai:0.7.7
Kidocode » Crawl4ai » Version: 0.7.8

cpe:2.3:a:kidocode:crawl4ai:0.7.8
Kidocode » Crawl4ai » Version: 0.8.0

cpe:2.3:a:kidocode:crawl4ai:0.8.0
Kidocode » Crawl4ai » Version: 0.8.5

cpe:2.3:a:kidocode:crawl4ai:0.8.5
Kidocode » Crawl4ai » Version: 0.8.6

cpe:2.3:a:kidocode:crawl4ai:0.8.6
Kidocode » Crawl4ai » Version: 0.8.7

cpe:2.3:a:kidocode:crawl4ai:0.8.7
Kidocode » Crawl4ai » Version: 0.8.8

cpe:2.3:a:kidocode:crawl4ai:0.8.8
Kidocode » Crawl4ai » Version: 0.8.9

cpe:2.3:a:kidocode:crawl4ai:0.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57571

Products

Pricing

Contact Us