# CVE-2026-119119: Crawl4AI denial of service in Docker API server

Source: https://junglewise.ai/threats/cve-2026-119119-crawl4ai-before-0-9-5-contains-a-denial-of-service-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-29. Updated: 2026-10-29  
License: CC BY 4.0 with a link back

CVE-2026-119119 · Severity: high · CVSS 7.5 · Published 2026-10-29

Crawl4AI is a web scraping tool that provides a Docker API server for crawling web pages. An unauthenticated attacker can send specially crafted requests with extremely large delay values to exhaust the server's browser page pool, preventing legitimate users from performing crawls. This causes a denial of service where crawl requests hang or fail.

Technologies: [Unclecode Crawl4AI](https://junglewise.ai/threats/technologies/unclecode-crawl4ai). Vendors: [Unclecode](https://junglewise.ai/threats/vendors/unclecode).

## Quick answers

**Is CVE-2026-119119 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-119119 being exploited in the wild.

**How severe is CVE-2026-119119?** High severity, with a CVSS score of 7.5, published 29 October 2026.

**Which products and versions are affected?** Unclecode Crawl4AI before 0.9.5.

**Is there a fix for CVE-2026-119119?** Yes: fixed in 0.9.5. Until then: Enable JWT authentication by setting security.jwt_enabled and restrict API access to trusted networks only. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-119119 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-119119?** Check whether you run Unclecode Crawl4AI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 0.9.5

Enable JWT authentication by setting security.jwt_enabled and restrict API access to trusted networks only.

## Technical details

The vulnerability exists in the _clamp_untrusted() function in crawl4ai/async_configs.py, which fails to cap three fields (delay_before_return_html, mean_delay, and max_range) in untrusted CrawlerRunConfig bodies, even though similar time-related fields like page_timeout are properly clamped. An attacker can send huge values to /crawl or /crawl/stream endpoints over the network without authentication to hold browser pages indefinitely or stall the rate limiter, exhausting the page pool and blocking other concurrent crawls.

## Affected products

- unclecode Crawl4AI before 0.9.5

## Timeline

- 2026-10-15: disclosed
- 2026-10-29: advisory

## References

- [https://github.com/unclecode/crawl4ai/security/advisories/GHSA-rhjm-7hj7-75fx](https://github.com/unclecode/crawl4ai/security/advisories/GHSA-rhjm-7hj7-75fx)
- [https://www.vulncheck.com/advisories/crawl4ai-before-0.9.5-denial-of-service-via-unbounded-crawlerrunconfig-delay-fields](https://www.vulncheck.com/advisories/crawl4ai-before-0.9.5-denial-of-service-via-unbounded-crawlerrunconfig-delay-fields)

## Related threats

- [Crawl4AI blind SSRF in CacheValidator proxy bypass](https://junglewise.ai/threats/cve-2026-119122-crawl4ai-before-0-9-5-contains-a-blind-server-side-request)
- [Crawl4AI JavaScript injection in Docker API server](https://junglewise.ai/threats/cve-2026-119121-crawl4ai-from-0-9-0-before-0-9-5-contains-a-javascript-injection)
- [Crawl4AI untrusted model loading in CosineStrategy](https://junglewise.ai/threats/cve-2026-119120-crawl4ai-from-0-9-0-before-0-9-5-fails-to-filter-the)
- [Crawl4AI improper certificate validation in Chromium launch](https://junglewise.ai/threats/cve-2026-119118-crawl4ai-before-0-9-5-contains-an-improper-certificate)
- [Crawl4AI inefficient regular expression complexity in Docker API](https://junglewise.ai/threats/cve-2026-115508-crawl4ai-0-7-0-before-0-9-5-contains-an-inefficient-regular)