CVE-2026-26216
published 2026-02-12CVE-2026-26216: Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter…
PriorityP191critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
ITWEXPLOITVulnCheck KEVInitial access
Exploited in the wild
EPSS
6.00%
93.3th percentile
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kidocode | crawl4ai | < 0.8.0 | 0.8.0 |
| kidocode | crawl4ai | >= 0 < 0.8.0 | 0.8.0 |
| unclecode | crawl4ai | < 0.8.0 | 0.8.0 |
CVSS provenance
nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv4.010.0CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vulncheck10.0CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
osv·2026-01-16
CVE-2026-26216 [CRITICAL] Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
A critical remote code execution vulnerability exists in the Crawl4AI Docker API deployment. The `/crawl` endpoint accepts a `hooks` parameter containing Python code that is executed using `exec()`. The `__import__` builtin was included in the allowed builtins, allowing attackers to import arbitrary modules and execute system commands.
**Attack Vector:**
```json
POST /crawl
{
"urls": ["https://example.com"],
"hooks": {
"code": {
"on_page_context_created": "async def hook(page, context, **kwargs):\n __import__('os').system('malicious_command')\n return page"
}
}
}
```
### Impact
An unauthenticated attacker can:
- Execute arbitrary system commands
- Read/write files on the server
- Exfiltrate sensitive data
GHSA
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
ghsa·2026-01-16
CVE-2026-26216 [CRITICAL] CWE-94 Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
A critical remote code execution vulnerability exists in the Crawl4AI Docker API deployment. The `/crawl` endpoint accepts a `hooks` parameter containing Python code that is executed using `exec()`. The `__import__` builtin was included in the allowed builtins, allowing attackers to import arbitrary modules and execute system commands.
**Attack Vector:**
```json
POST /crawl
{
"urls": ["https://example.com"],
"hooks": {
"code": {
"on_page_context_created": "async def hook(page, context, **kwargs):\n __import__('os').system('malicious_command')\n return page"
}
}
}
```
### Impact
An unauthenticated attacker can:
- Execute arbitrary system commands
- Read/write files on the server
- Exfiltrate sensitive data
VulnCheck
kidocode crawl4ai Improper Control of Generation of Code ('Code Injection')
vulncheck·2026·CVSS 10.0
CVE-2026-26216 [CRITICAL] kidocode crawl4ai Improper Control of Generation of Code ('Code Injection')
kidocode crawl4ai Improper Control of Generation of Code ('Code Injection')
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
Affected: kidocode crawl4ai
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or
No detection rules found.
Nuclei
Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
nuclei·CVSS 10.0
CVE-2026-26216 [CRITICAL] Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
Template:
id: CVE-2026-26216
info:
name: Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
author: dishantmodi
severity: crit
2026-02-12
Published
Exploited in the wild