https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:38:59.428525+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56260 CVE-2026-56260 — Crawl4AI - Arbitrary File Write via output_path Parameter 2026-10-05T15:38:59.430266+00:00

Affected: Crawl4AI

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-r9hw-78q5-478g GHSA-r9hw-78q5-478g 2026-10-05T15:38:59.430320+00:00

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.