Vulnerability · Published Oct 22, 2026 · Assigned by VulnCheck

CVE-2026-115508Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields

Medium 6.5

In plain English

A medium-severity regular-expression denial of service in crawl4ai from unclecode. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.5%top 60.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via RegexExtractionStrategy.custom, RegexChunking.patterns or JsonCss, JsonXPath and JsonLxml schema regex fields against a crafted page to freeze the entire server, including /health.

Affected products (as reported)

Vendor	Product	Versions
unclecode	crawl4ai	0.7.0 – before 0.9.5

Weakness: CWE-1333 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

GitHub Security Advisory (GHSA-j843-8p47-rhxp) vendor-advisory
https://github.com/unclecode/crawl4ai/commit/8aea2006e2cdb96a185e50b20633fc323dff6429 patch
crawl4ai v0.9.5 Release Notes release-notes
https://github.com/unclecode/crawl4ai product
VulnCheck Advisory: Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields third-party-advisory