CVE-2026-26216

Critical · CVSS 10.0

crawl4ai — Remote Code Execution via exec() with unrestricted __import__ builtin in Docker API hooks parameter

CVSS: 10.0; nvd
EPSS: 1.59%; 73th pct
KEV: No
Class: oss containerizable; CWE-94

Description

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.

Search profile — drives PoC discovery

Symbols exec()__import__hooks/crawlallowed_builtinscrawl4aiAsyncWebCrawler

Keywords CVE-2026-26216crawl4aicrawl4ai RCEcrawl4ai hooks execcrawl4ai docker api exploitcrawl4ai /crawl endpointcrawl4ai unauthenticated RCEGHSA-5882-5rx9-xgxpcrawl4ai __import__crawl4ai 0.8.0

Versions: <0.8.0

Affected packages

PyPI

crawl4ai

0 → 0.8.0

References

Status: enriched · ingested 2026-07-14T18:00:20.000Z · profiled 2026-07-14T18:30:20.000Z