CVE-2026-57572
Critical · CVSS 10.0crawl4ai — Chromium argument injection leading to arbitrary command execution (CWE-88, CWE-94)
- CVSS
- 10.0
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-88, CWE-94
Description
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.
Search profile — drives PoC discovery
Symbols browser_config.extra_args--no-zygoteextra_argsbrowser_configChromium launch argumentsDocker API serverchild-process launch command
Keywords CVE-2026-57572crawl4aiGHSA-r253-r9jw-qg44browser_config extra_args exploitChromium argument injection RCEcrawl4ai Docker API unauthenticatedcrawl4ai --no-zygotecrawl4ai arbitrary command executioncrawl4ai PoCcrawl4ai 0.9.0
Versions: < 0.9.0
Affected packages
| PyPI | crawl4ai | 0 → 0.9.0 |
References
Status: enriched · ingested 2026-07-09T00:00:39.000Z · profiled 2026-07-09T00:30:39.000Z