Vulnerability Description
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via RegexExtractionStrategy.custom, RegexChunking.patterns or JsonCss, JsonXPath and JsonLxml schema regex fields against a crafted page to freeze the entire server, including /health.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/unclecode/crawl4ai
- https://github.com/unclecode/crawl4ai/commit/8aea2006e2cdb96a185e50b20633fc323df
- https://github.com/unclecode/crawl4ai/releases/tag/v0.9.5
- https://github.com/unclecode/crawl4ai/security/advisories/GHSA-j843-8p47-rhxp
- https://www.vulncheck.com/advisories/crawl4ai-0.7.0-before-0.9.5-redos-via-crawl
- https://github.com/unclecode/crawl4ai/security/advisories/GHSA-j843-8p47-rhxp
FAQ
What is CVE-2026-115508?
CVE-2026-115508 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions i...
How severe is CVE-2026-115508?
CVE-2026-115508 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-115508?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.