Authentication Bypass in Crawl4AI by UncleCode
CVE-2026-56262

6.9MEDIUM

Key Information:

Vendor

Crawl4ai

Status
Crawl4ai
Vendor
CVE Published:
24 June 2026

What is CVE-2026-56262?

Crawl4AI versions before 0.8.7 are susceptible to an authentication bypass vulnerability that exposes critical endpoints to unauthenticated attackers. This flaw allows malicious users to access the '/monitor/actions/cleanup' endpoint, enabling them to manipulate monitoring operations and disrupt service functionality without requiring authentication.

Affected Version(s)

Crawl4AI 0 < 0.8.7

Crawl4AI 0.8.7

References

https://github.com/unclecode/crawl4ai/security/advisories...
vendor-advisory
https://github.com/unclecode/crawl4ai
product
https://www.vulncheck.com/advisories/crawl4ai-unauthentic...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.