Command Injection in Crawl4AI Docker API

Executive Summary

CVE-2026-57572 is a vulnerability in Crawl4AI, an open-source web crawler and scraper. Before version 0.9.0, the Docker API server accepted user-supplied arguments (browser_config.extra_args) that were passed directly into Chromium's launch commands. An attacker could exploit this by injecting malicious Chromium switches, including the --no-zygote flag, which allows the attacker to replace a child-process launch command. This results in Chromium executing an attacker-controlled command within the container as the runtime user.

Because the Docker API is unauthenticated by default, an attacker only needs to send a single request to achieve arbitrary command execution inside the container.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking if your system is running Crawl4AI versions 0.8.9 or earlier, which accept user-supplied browser_config.extra_args that lead to command injection via the Docker API server.

To detect exploitation attempts or presence of the vulnerability, you can monitor Docker API requests for suspicious parameters such as browser_config.extra_args containing Chromium switches like --utility-cmd-prefix, --renderer-cmd-prefix, --gpu-launcher, or --browser-subprocess-path combined with --no-zygote.

Suggested commands include:

• Use network monitoring tools (e.g., tcpdump or Wireshark) to capture Docker API traffic and filter for requests containing 'extra_args'. Example: tcpdump -i any -A -s 0 'tcp port 2375 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' | grep extra_args
• Inspect running containers for suspicious Chromium launch arguments by checking process command lines: ps aux | grep chromium
• Check Docker daemon logs for unusual API requests or errors related to browser_config.extra_args.

Ultimately, upgrading to version 0.9.0 or later, enabling Docker API authentication, and restricting API access are recommended to prevent exploitation.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to execute arbitrary commands inside the container running Crawl4AI without any authentication. This can lead to full compromise of the container environment, including data theft, service disruption, or further attacks on the host system or network.

Given the CVSS score of 10.0, this is a critical security issue that can severely impact the confidentiality, integrity, and availability of your systems.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated remote code execution, leading to full system compromise including read/write access to application data, secrets, and environment variables.

Such unauthorized access and potential data breaches could result in non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and strict access controls.

Therefore, exploitation of this vulnerability could lead to violations of confidentiality, integrity, and availability requirements mandated by these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade Crawl4AI to version 0.9.0 or later, where the issue has been fixed.

Since the Docker API server is unauthenticated by default and allows arbitrary command execution via crafted requests, ensure that the Docker API is not exposed to untrusted networks or users.

Useful 0 Not Useful 0