Unauthenticated remote attackers can exploit a local file inclusion vulnerability in Crawl4AI to access sensitive system files and environment variables, creating a high risk of credential exposure.

The application fails to properly sanitize input in the /execute_js, /screenshot, /pdf, and /html endpoints, which accept file:// URLs. This allows an unauthenticated attacker to traverse the filesystem and read arbitrary sensitive files, such as /etc/passwd or environment variables.

Successful exploitation allows unauthorized access to critical system files and sensitive configuration data, including API keys and credentials stored in environment variables. With a CVSS score of 8.6, this vulnerability poses a high risk to the confidentiality and integrity of the host environment. The ability for unauthenticated actors to retrieve internal application structure significantly elevates the likelihood of further post-exploitation activities.

Immediate Action: Update the Crawl4AI package to version 0.8.0 or later to ensure proper URL handling and file access restrictions.

Proactive Monitoring: Monitor server access logs for unusual requests containing file:// URI schemes or attempts to access common system paths like /etc/passwd or /proc/self/environ.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block or sanitize requests containing file:// protocol handlers targeting the identified API endpoints.

Public Exploit Available: Unknown

Given the high CVSS score and the ease of exploitation, organizations running Crawl4AI in a Docker environment must prioritize patching to version 0.8.0. Failure to address this vulnerability allows for trivial unauthorized access to sensitive host data, which could lead to full system compromise. Immediate remediation is strongly advised to neutralize this attack vector.