Critical Arbitrary File Write in Crawl4AI Docker API Server
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Jul 12, 2026
A critical path traversal flaw tracked as CVE-2026-56260 allows unauthenticated remote attackers to write arbitrary files on servers running vulnerable versions of Crawl4AI. The issue affects the Docker API server’s /screenshot and /pdf endpoints, where the output_path parameter accepts absolute paths and directory traversal sequences without proper validation. The vulnerability impacts versions up to and including 0.8.6 and was fixed in 0.8.7.
By overwriting files writable by the application user, attackers could cause denial of service and compromise system integrity, including planting SSH authorized keys or injecting cron jobs for persistence. The flaw is classified as CWE-22 and carries a CVSS 9.1 rating with network-based, unauthenticated exploitation potential. Reports said no public proof-of-concept or confirmed active exploitation had emerged at publication time, and advised organizations to upgrade immediately or restrict access to the exposed endpoints as a compensating control.
