Intel

CVE-2026-56260

crawl4ai: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVE-2026-56260)

criticalEPSS 0.7%

Affected

  • pypi/crawl4ai 0.3.0..*
  • pypi/crawl4ai 0.3.1..*
  • pypi/crawl4ai 0.3.2..*
  • pypi/crawl4ai 0.3.3..*
  • pypi/crawl4ai 0.3.4..*
  • pypi/crawl4ai 0.3.5..*
  • pypi/crawl4ai 0.3.6..*
  • pypi/crawl4ai 0.3.7..*
  • pypi/crawl4ai 0.3.71..*
  • pypi/crawl4ai 0.3.72..*
  • pypi/crawl4ai 0.3.73..*
  • pypi/crawl4ai 0.3.731..*
  • pypi/crawl4ai 0.3.74..*
  • pypi/crawl4ai 0.3.741..*
  • pypi/crawl4ai 0.3.742..*
  • pypi/crawl4ai 0.3.743..*
  • pypi/crawl4ai 0.3.744..*
  • pypi/crawl4ai 0.3.745..*
  • pypi/crawl4ai 0.3.746..*
  • pypi/crawl4ai 0.3.8..*
  • pypi/crawl4ai 0.4.0..*
  • pypi/crawl4ai 0.4.1..*
  • pypi/crawl4ai 0.4.21..*
  • pypi/crawl4ai 0.4.22..*
  • pypi/crawl4ai 0.4.23..*
  • pypi/crawl4ai 0.4.24..*
  • pypi/crawl4ai 0.4.241..*
  • pypi/crawl4ai 0.4.242..*
  • pypi/crawl4ai 0.4.243..*
  • pypi/crawl4ai 0.4.244..*
  • pypi/crawl4ai 0.4.245..*
  • pypi/crawl4ai 0.4.246..*
  • pypi/crawl4ai 0.4.247..*
  • pypi/crawl4ai 0.4.248..*
  • pypi/crawl4ai 0.4.248b3..*
  • pypi/crawl4ai 0.4.3b1..*
  • pypi/crawl4ai 0.4.3b2..*
  • pypi/crawl4ai 0.4.3b3..*
  • pypi/crawl4ai 0.5.0..*
  • pypi/crawl4ai 0.5.0.post1..*
  • pypi/crawl4ai 0.5.0.post2..*
  • pypi/crawl4ai 0.5.0.post3..*
  • pypi/crawl4ai 0.5.0.post4..*
  • pypi/crawl4ai 0.5.0.post5..*
  • pypi/crawl4ai 0.5.0.post6..*
  • pypi/crawl4ai 0.5.0.post7..*
  • pypi/crawl4ai 0.5.0.post8..*
  • pypi/crawl4ai 0.6.0..*
  • pypi/crawl4ai 0.6.0rc1..*
  • pypi/crawl4ai 0.6.1..*
  • pypi/crawl4ai 0.6.2..*
  • pypi/crawl4ai 0.6.3..*
  • pypi/crawl4ai 0.7.0..*
  • pypi/crawl4ai 0.7.1..*
  • pypi/crawl4ai 0.7.2..*
  • pypi/crawl4ai 0.7.3..*
  • pypi/crawl4ai 0.7.4..*
  • pypi/crawl4ai 0.7.5..*
  • pypi/crawl4ai 0.7.6..*
  • pypi/crawl4ai 0.7.7..*
  • pypi/crawl4ai 0.7.8..*
  • pypi/crawl4ai 0.8.0..*
  • pypi/crawl4ai 0.8.5..*
  • pypi/crawl4ai 0.8.6..*

Description

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

Source: OSV (Open Source Vulnerabilities)cvelistv5NVD (NIST)CVE.org (MITRE)

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

pypicrawl4ai
0.3.00.3.10.3.20.3.30.3.40.3.50.3.60.3.70.3.710.3.720.3.730.3.7310.3.740.3.7410.3.7420.3.7430.3.7440.3.7450.3.7460.3.80.4.00.4.10.4.210.4.220.4.230.4.240.4.2410.4.2420.4.2430.4.2440.4.2450.4.2460.4.2470.4.2480.4.248b30.4.3b10.4.3b20.4.3b30.5.00.5.0.post10.5.0.post20.5.0.post30.5.0.post40.5.0.post50.5.0.post60.5.0.post70.5.0.post80.6.0

Metrics

XIEM Effective CVSS
9.1
Source: nvd-v3
EPSS percentile
49.5 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
critical
Priority score
87.11
Exploit maturity
no public PoC known
CVSS v3
9.1
CVSS v4
8.8
EPSS score
0.7 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-12 12:16 UTC
CWE
CWE-22

Weakness classes (CWE)

  • CWE-22Base

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

    cwe.mitre.org →

References & sources

Linked advisories