RCE in Kidocode Crawl4ai
CVE-2026-26216
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Kidocode Crawl4ai
- Unclecode Crawl4ai — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (vendor-advisory, Mitigation, patch, Vendor Advisory)
- disclosure@vulncheck.com (release-notes, Release Notes)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2026-26216?
- CVE-2026-26216 is a critical-severity vulnerability in Kidocode Crawl4ai, classified under Code Injection. CVSS score: 10.0/10. Published 2026-02-12.
- How severe is CVE-2026-26216?
- Critical severity. CVSS v3 base score is 10.0 out of 10.
- Is CVE-2026-26216 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.