Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-56259

Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by supplying a malicious base_url parameter and setting api_token to env:VARIABLE_NAME to exfiltrate provider API keys and server secrets including JWT SECRET_KEY for authentication bypass.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Crawl4AI Crawl4AI

Default version status: unaffected

  • 0 to < 0.8.8affected
  • 0.8.8unaffected
pkg:pypi/crawl4ai

References