# CVE-2026-53755: unclecode Crawl4AI SSRF via proxy settings in Docker API server

Source: https://junglewise.ai/threats/cve-2026-53755-unclecode-crawl4ai-ssrf-via-proxy-settings-in-docker-api-server  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-23. Updated: 2026-06-23  
License: CC BY 4.0 with a link back

CVE-2026-53755 · Severity: high · CVSS 8.6 · Published 2026-06-23

Crawl4AI is an open-source tool used to scrape and crawl websites for use with Large Language Models (LLMs). A security flaw in its Docker API server allows unauthorized users to bypass security checks by providing a malicious proxy address. This could allow an attacker to access sensitive internal services, private data, or cloud credentials (such as AWS metadata) that are normally protected from the public internet.

Technologies: [crawl4ai (PyPI)](https://junglewise.ai/threats/technologies/crawl4ai). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-53755 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-53755 being exploited in the wild.

**How severe is CVE-2026-53755?** High severity, with a CVSS score of 8.6, published 23 June 2026.

**Which products and versions are affected?** crawl4ai (PyPI) <= 0.8.8, ECOSYSTEM:introduced=0,fixed=0.8.9.

**Is there a fix for CVE-2026-53755?** Yes. crawl4ai (PyPI): upgrade to 0.8.9 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-53755 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-53755?** Check whether you run crawl4ai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- crawl4ai (PyPI): upgrade to 0.8.9 or later

  ```sh
  pip install "crawl4ai>=0.8.9"
  ```


## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the Crawl4AI Docker API server prior to version 0.8.9. While the application validates the target crawl URL, it fails to validate proxy addresses provided in the browser_config or crawler_config. An unauthenticated attacker can submit a request with a benign crawl URL but a malicious proxy server pointing to internal IP addresses or cloud metadata endpoints (e.g., 169.254.169.254). Because the Docker API is unauthenticated by default and Chromium routes egress through the provided proxy, attackers can retrieve sensitive information from internal environments. The issue is fixed in version 0.8.9 by applying global-routability checks to all proxy destinations.

## Affected products

- unclecode Crawl4AI < 0.8.9

## Identifiers

- CVE-2026-53755
- GHSA-6qhc-x826-342c
- PYSEC-2026-588

## Timeline

- 2026-06-04: advisory: GitHub security advisory published
- 2026-06-23: disclosed: NVD publication date

## References

- [https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c](https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c)

## Related threats

- [Crawl4AI arbitrary file write in Docker API server screenshot and pdf endpoints](https://junglewise.ai/threats/cve-2026-56260-crawl4ai-arbitrary-file-write-in-docker-api-server-screenshot-and)
- [Crawl4AI credential exfiltration in Docker API server](https://junglewise.ai/threats/cve-2026-56259-crawl4ai-credential-exfiltration-in-docker-api-server)
- [PYSEC-2026-1281 - Crawl4AI SSRF vulnerability](https://junglewise.ai/threats/cve-2025-28197-crawl4ai-ssrf-vulnerability)
- [unclecode Crawl4AI SSRF in Docker API streaming path](https://junglewise.ai/threats/cve-2026-57573-unclecode-crawl4ai-ssrf-in-docker-api-streaming-path)
- [unclecode Crawl4AI remote code execution in Docker API server](https://junglewise.ai/threats/cve-2026-57572-unclecode-crawl4ai-remote-code-execution-in-docker-api-server)