Security Advisory - Updated 2026-06-24 - Crawl4AI / Docker API
Crawl4AI Docker API: check auth, crawl jobs, and outbound access
Crawl4AI received multiple June advisories around Docker API exposure, monitor endpoints, computed field execution, and SSRF filtering. Patch to the newest fixed version, turn on authentication, and review crawl jobs before putting the service back on a public network.
Affected versions
| CVE | Product | Affected | Fixed | CVSS |
|---|---|---|---|---|
| CVE-2026-53753 | Crawl4AI | <= 0.8.6 | 0.8.7 | 9.8 |
| CVE-2026-56265 | Crawl4AI | < 0.8.7 | 9.8 | |
| CVE-2026-53754 | Crawl4AI | <= 0.8.7 | 0.8.8 | 7.5 |
| CVE-2026-56262 | Crawl4AI | < 0.8.7 | 6.9 |
Owner self-check
docker ps | grep -i crawl4ai
docker inspect $(docker ps -q --filter name=crawl4ai) 2>/dev/null | egrep -i 'JWT|SECRET|TOKEN|PORT|HostPort'
ss -lntp | egrep 'crawl4ai|docker|11235|8000|8080'
docker logs --since 7d $(docker ps -q --filter name=crawl4ai) 2>/dev/null | egrep -i 'auth|jwt|token|monitor|crawl|schema|webhook|metadata|error|warning'What to review
- Crawl4AI version and image digest actually running in Docker.
- Whether the Docker API server or Crawl4AI API port was reachable from the internet.
- Authentication state, JWT signing key, API tokens, monitor endpoint access, admin users, worker jobs, and recent crawl jobs.
- Computed-field extraction schemas, webhook settings, outbound requests, and cloud metadata access attempts during the exposure window.
Safe fix path
- Upgrade Crawl4AI to 0.8.8 or newer and redeploy every container using an old image.
- Enable authentication, set a fresh JWT signing secret, and rotate API credentials used by Crawl4AI.
- Bind the API to a private interface or put it behind authentication and IP restrictions.
- Restrict outbound access from crawler containers to the minimum destinations they need.
- Review logs before deleting containers; short-lived containers can be the only evidence.
Repair help
Use Ping7 CVE Repair when Crawl4AI was public, API logs show unknown users, crawl jobs touched internal systems, or outbound metadata access needs review.