CVE-2026-91944 crawl4ai before 0.9.3 DOM-based XSS via Playground UI
Attackers can inject scripts via crawled content to steal API tokens and gain server control in the Playground UI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-91944?
CVE-2026-91944 is a medium-severity cross-site scripting vulnerability in unclecode crawl4ai, published on 15 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like the page title to steal the operator's API token from sessionStorage and gain full server control.
Weakness: CWE-79
Which versions are affected by CVE-2026-91944?
How do I fix CVE-2026-91944?
No fix has been published for CVE-2026-91944 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2026-91944 being exploited?
There is no known exploitation of CVE-2026-91944 in the wild and no public exploit code.
Sources
Also known as GHSA-hr2f-r8c5-ggxp, GHSA-m446-hp3q-qfxp.