# CVE-2026-100187: AIL Framework Onion module crawler task injection

Source: https://junglewise.ai/threats/cve-2026-100187-the-onion-module-in-ail-framework-contained-a-performance  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-25. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100187 · Severity: info · Published 2026-09-25

The AIL Framework's Onion module is a web crawler designed to search Tor hidden services. It contained a flaw in how it validated .onion domain targets: the module accepted any URL with a 69-character length and ending in ".onion", without checking if the domain was actually a valid Tor address. An attacker could embed crafted URLs containing IP addresses or regular hostnames in web content that the framework crawls, and these would be accepted as legitimate Tor targets, causing the crawler to scan unintended network resources and potentially disrupting its operations or directing it toward attacker-controlled systems.

Technologies: [Ail-Project AIL framework](https://junglewise.ai/threats/technologies/ail-framework). Vendors: [Ail-Project](https://junglewise.ai/threats/vendors/ail-project).

## Quick answers

**Is CVE-2026-100187 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100187 being exploited in the wild.

**How severe is CVE-2026-100187?** Informational severity, published 25 September 2026.

**Which products and versions are affected?** AIL Project AIL Framework.

**Is there a fix for CVE-2026-100187?** A patch was published on 2026-09-25: Patch commit 5c8a68b removes length-based shortcut and adds proper hostname validation Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100187 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-100187?** Check whether you run Ail-Project AIL framework. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an insufficient input validation in the Onion module's URL extraction logic, specifically a length-based and suffix-based shortcut that bypassed hostname parsing and onion-domain validation. An unauthenticated attacker can inject arbitrary target URLs into the crawler task queue by publishing crafted content in locations the framework crawls, with no user interaction required. This results in a loss of integrity in crawler target selection, forcing the framework to process non-.onion targets. A patch exists that removes the shortcut and requires proper hostname parsing and validation before queuing crawler tasks.

## Affected products

- AIL Project AIL Framework

## Timeline

- 2026-09-25: disclosed
- 2026-09-25: patched: Patch commit 5c8a68b removes length-based shortcut and adds proper hostname validation

## References

- [https://github.com/ail-project/ail-framework/commit/5c8a68b3d8c7d7b03e5febe4ac5b5aca91826adb](https://github.com/ail-project/ail-framework/commit/5c8a68b3d8c7d7b03e5febe4ac5b5aca91826adb)

## Related threats

- [AIL Framework stored XSS in showDomain page](https://junglewise.ai/threats/cve-2026-100190-the-ail-framework-crawler-splash-domain-page-showdomain-html-is)
- [AIL Framework insufficient authorization in crawler task API](https://junglewise.ai/threats/cve-2026-100177-the-ail-framework-crawler-task-creation-api-api-add-crawler-task)
- [AIL Framework stored XSS in username timeline tooltip](https://junglewise.ai/threats/cve-2026-100176-the-ail-framework-s-username-timeline-feature-is-vulnerable-to)
- [AIL Framework stored XSS in tag selector component](https://junglewise.ai/threats/cve-2026-100174-the-ail-framework-tag-selector-component-var-www-static-js-tags)
- [AIL Framework stored XSS in Jinja2 templates](https://junglewise.ai/threats/cve-2026-100172-the-ail-framework-ail-project-ail-framework-contains-a-stored)