Vulnerability · Published Sep 15, 2026 · Assigned by VulnCheck

CVE-2026-91943Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy

High 7.7

In plain English

A high-severity server-side request forgery in crawl4ai from unclecode. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)0.4%top 70.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where _get_pdf_path() re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to access internal services, exfiltrating responses through PDF text extraction in crawl results.

Affected products (as reported)

Vendor	Product	Versions
unclecode	crawl4ai	0 – before 0.9.3

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-q5rj-45vw-vp2g) vendor-advisory
VulnCheck Advisory: Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy third-party-advisory