4.3
MediumCVSS 3.1 · from VulnCheck
CVE-2026-119121
Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for
crawl4ai · CWE-95 · CWE-95Affectedcrawl4ai
FixUpdate to 0.9.5 or newer
PublishedOct 29, 15:58 · VulnCheck
ScoredOct 29 · 4.3 · VulnCheck
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
Description
Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows authenticated API clients to run arbitrary JavaScript in the crawl page via allowlisted css_selector and wait_for fields. Attackers can inject quotes into css_selector or supply js: conditions in wait_for, bypassing the js_code block to alter page state and returned crawl content.
From VulnCheck
Affected and fixed versions
ProductAffectedFixed incrawl4ai0.9.0 – before 0.9.50.9.5crawl4aiNot affected0.9.5
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known