What is CVE-2026-57572?

CVE-2026-57572 is a critical-severity vulnerability in Unclecode Crawl4ai, classified under Argument Injection. CVSS score: 10.0/10. Published 2026-07-06.

How severe is CVE-2026-57572?

Critical severity. CVSS v3 base score is 10.0 out of 10.

RCE in Unclecode Crawl4ai

CVE-2026-57572

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium sw…

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Unclecode Crawl4ai — versions < 0.9.0

Weakness classification (CWE)

CWE-88 — Argument Injection
CWE-94 — Code Injection

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-57572?: CVE-2026-57572 is a critical-severity vulnerability in Unclecode Crawl4ai, classified under Argument Injection. CVSS score: 10.0/10. Published 2026-07-06.
How severe is CVE-2026-57572?: Critical severity. CVSS v3 base score is 10.0 out of 10.