What is CVE-2026-57571?

CVE-2026-57571 is a critical-severity vulnerability in Unclecode Crawl4ai, classified under Path Traversal. CVSS score: 9.6/10. Published 2026-07-06.

How severe is CVE-2026-57571?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Path Traversal in Unclecode Crawl4ai

CVE-2026-57571

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no conf…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Unclecode Crawl4ai — versions < 0.9.0

Weakness classification (CWE)

CWE-22 — Path Traversal
CWE-59 — Improper Link Resolution Before File Access

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-57571?: CVE-2026-57571 is a critical-severity vulnerability in Unclecode Crawl4ai, classified under Path Traversal. CVSS score: 9.6/10. Published 2026-07-06.
How severe is CVE-2026-57571?: Critical severity. CVSS v3 base score is 9.6 out of 10.