Vulnerability Description
Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication, causing service disruption.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kidocode | Crawl4Ai | < 0.8.7 |
Related Weaknesses (CWE)
References
- https://github.com/unclecode/crawl4aiProduct
- https://github.com/unclecode/crawl4ai/security/advisories/GHSA-365w-hqf6-vxfgThird Party Advisory
- https://www.vulncheck.com/advisories/crawl4ai-unauthenticated-access-to-monitor-Third Party Advisory
FAQ
What is CVE-2026-56262?
CVE-2026-56262 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invok...
How severe is CVE-2026-56262?
CVE-2026-56262 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-56262?
Check the references section above for vendor advisories and patch information. Affected products include: Kidocode Crawl4Ai.