Inefficient Regular Expression Vulnerability in Crawl4AI by Unclecode

CVE-2026-115508

What is CVE-2026-115508?

Crawl4AI versions 0.7.0 through 0.9.0 are susceptible to a regular expression complexity issue that arises when authenticated API clients use unbounded regex in the /crawl request body. Exploiting this vulnerability, attackers can introduce complex regex patterns via various schema fields, potentially leading to server performance degradation or unresponsiveness, impacting critical functionalities like the /health monitoring endpoint. This behavior can result in a denial of service situation, affecting the stability of the server.

References