Crawl4AI Untrusted Config Bypass Leading to Admin JWT Forgery

Executive Summary

CVE-2026-109237 is a security flaw in the crawl4ai library versions 0.9.0 to 0.9.3. It allows unauthenticated attackers to bypass security checks by wrapping forbidden configuration objects in dictionary-type structures. This bypasses the untrusted-config gate, enabling access to sensitive environment variables like SECRET_KEY and LLM API keys (e.g., OPENAI_API_KEY). Attackers can then forge admin JWT tokens if SECRET_KEY is compromised.

Useful 0 Not Useful 0

Detection Guidance

Check if your Crawl4AI version is between 0.9.0 and 0.9.3. Inspect API logs for requests to /config/dump with wrapped dict-type objects. Look for environment variable leaks in responses or logs.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to read sensitive environment variables such as SECRET_KEY and LLM API keys. If SECRET_KEY is exposed, attackers can forge admin-scope JWT tokens, gaining unauthorized administrative access. Additionally, it may enable arbitrary file writes through deserialized objects.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade to Crawl4AI version 0.9.4 or later immediately. Avoid storing SECRET_KEY in the environment. Restrict API access to trusted clients only. Remove unnecessary secrets from the server environment.

Useful 0 Not Useful 0