CVE-2026-57572
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Crawl4AI before version 0.9.0 has a vulnerability in the Docker API that allows injecting arguments into the Chromium browser. An attacker can use Chromium switches to replace the child process launch command, leading to arbitrary code execution in the container.
Risk Assessment
The risk for the organization is critical because the unauthenticated Docker API enables remote arbitrary command execution in the container, potentially leading to full system compromise and data breach.
Recommendation
Immediately update Crawl4AI to version 0.9.0 or later. If an update is not possible, restrict access to the Docker API to trusted networks and implement authentication.
Original NVD description (English source)
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.