CVE-2026-57572 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
Unauthenticated attackers can execute arbitrary commands by injecting Chromium launch arguments in the Crawl4AI Docker API server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-57572?
CVE-2026-57572 is a critical command injection vulnerability in unclecode crawl4ai, published on 6 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.
Which versions are affected by CVE-2026-57572?
3 open source packages ship an affected version, including crawl4ai. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
crawl4ai PyPI | All versions | 0.9.0 |
crawl4ai PyPI | All versions | 0.9.0 |
crawl4ai PyPI | All versions | 0.9.0 |
Products include Kidocode Crawl4ai.
How do I fix CVE-2026-57572?
Upgrade crawl4ai to 0.9.0 or later.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-57572 being exploited?
There is no known exploitation of CVE-2026-57572 in the wild and no public exploit code.
Other vulnerabilities in unclecode crawl4ai
- CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
- CVE-2026-53753 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
- CVE-2026-57571 Crawl4AI arbitrary file write via download filename path traversal
- CVE-2026-56265 Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
- CVE-2026-56261 Crawl4AI - Server-Side Request Forgery via Webhook URLs
Sources
Also known as GHSA-r253-r9jw-qg44, PYSEC-2026-2139.