CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57572

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 40.6%

CVSS Severity

CVSS v3 Score 10.0

References

Products affected by CVE-2026-57572

Kidocode » Crawl4ai » Version: 0.1.0

cpe:2.3:a:kidocode:crawl4ai:0.1.0
Kidocode » Crawl4ai » Version: 0.2.0

cpe:2.3:a:kidocode:crawl4ai:0.2.0
Kidocode » Crawl4ai » Version: 0.2.1

cpe:2.3:a:kidocode:crawl4ai:0.2.1
Kidocode » Crawl4ai » Version: 0.2.2

cpe:2.3:a:kidocode:crawl4ai:0.2.2
Kidocode » Crawl4ai » Version: 0.2.4

cpe:2.3:a:kidocode:crawl4ai:0.2.4
Kidocode » Crawl4ai » Version: 0.2.6

cpe:2.3:a:kidocode:crawl4ai:0.2.6
Kidocode » Crawl4ai » Version: 0.2.7

cpe:2.3:a:kidocode:crawl4ai:0.2.7
Kidocode » Crawl4ai » Version: 0.2.71

cpe:2.3:a:kidocode:crawl4ai:0.2.71
Kidocode » Crawl4ai » Version: 0.2.72

cpe:2.3:a:kidocode:crawl4ai:0.2.72
Kidocode » Crawl4ai » Version: 0.2.73

cpe:2.3:a:kidocode:crawl4ai:0.2.73
Kidocode » Crawl4ai » Version: 0.2.74

cpe:2.3:a:kidocode:crawl4ai:0.2.74
Kidocode » Crawl4ai » Version: 0.2.77

cpe:2.3:a:kidocode:crawl4ai:0.2.77
Kidocode » Crawl4ai » Version: 0.3.0

cpe:2.3:a:kidocode:crawl4ai:0.3.0
Kidocode » Crawl4ai » Version: 0.3.3

cpe:2.3:a:kidocode:crawl4ai:0.3.3
Kidocode » Crawl4ai » Version: 0.3.6

cpe:2.3:a:kidocode:crawl4ai:0.3.6
Kidocode » Crawl4ai » Version: 0.3.745

cpe:2.3:a:kidocode:crawl4ai:0.3.745
Kidocode » Crawl4ai » Version: 0.3.746

cpe:2.3:a:kidocode:crawl4ai:0.3.746
Kidocode » Crawl4ai » Version: 0.4.24

cpe:2.3:a:kidocode:crawl4ai:0.4.24
Kidocode » Crawl4ai » Version: 0.4.243

cpe:2.3:a:kidocode:crawl4ai:0.4.243
Kidocode » Crawl4ai » Version: 0.4.247

cpe:2.3:a:kidocode:crawl4ai:0.4.247
Kidocode » Crawl4ai » Version: 0.5.0

cpe:2.3:a:kidocode:crawl4ai:0.5.0
Kidocode » Crawl4ai » Version: 0.6.0

cpe:2.3:a:kidocode:crawl4ai:0.6.0
Kidocode » Crawl4ai » Version: 0.6.3

cpe:2.3:a:kidocode:crawl4ai:0.6.3
Kidocode » Crawl4ai » Version: 0.7.0

cpe:2.3:a:kidocode:crawl4ai:0.7.0
Kidocode » Crawl4ai » Version: 0.7.1

cpe:2.3:a:kidocode:crawl4ai:0.7.1
Kidocode » Crawl4ai » Version: 0.7.2

cpe:2.3:a:kidocode:crawl4ai:0.7.2
Kidocode » Crawl4ai » Version: 0.7.3

cpe:2.3:a:kidocode:crawl4ai:0.7.3
Kidocode » Crawl4ai » Version: 0.7.4

cpe:2.3:a:kidocode:crawl4ai:0.7.4
Kidocode » Crawl4ai » Version: 0.7.5

cpe:2.3:a:kidocode:crawl4ai:0.7.5
Kidocode » Crawl4ai » Version: 0.7.6

cpe:2.3:a:kidocode:crawl4ai:0.7.6
Kidocode » Crawl4ai » Version: 0.7.7

cpe:2.3:a:kidocode:crawl4ai:0.7.7
Kidocode » Crawl4ai » Version: 0.7.8

cpe:2.3:a:kidocode:crawl4ai:0.7.8
Kidocode » Crawl4ai » Version: 0.8.0

cpe:2.3:a:kidocode:crawl4ai:0.8.0
Kidocode » Crawl4ai » Version: 0.8.5

cpe:2.3:a:kidocode:crawl4ai:0.8.5
Kidocode » Crawl4ai » Version: 0.8.6

cpe:2.3:a:kidocode:crawl4ai:0.8.6
Kidocode » Crawl4ai » Version: 0.8.7

cpe:2.3:a:kidocode:crawl4ai:0.8.7
Kidocode » Crawl4ai » Version: 0.8.8

cpe:2.3:a:kidocode:crawl4ai:0.8.8
Kidocode » Crawl4ai » Version: 0.8.9

cpe:2.3:a:kidocode:crawl4ai:0.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57572

Products

Pricing

Contact Us