exploit-intel.com

Critical Arbitrary File Write Vulnerability in Crawl4AI (CVE-2026-56260)

First seen 13 Jul 2026, 00:12 UTC • •72.8

Article Content

1 / 6

Browse articles

ThreatCluster •July 13, 2026 at 22:58 UTC

•CVE-2026-56260 allows arbitrary file writes via Docker API endpoints in Crawl4AI.
•The vulnerability has a CVSS score of 9.1, indicating critical severity.
•Immediate patching to version 0.8.7 or later is strongly recommended.

CVE-2026-56260 is a critical arbitrary file write vulnerability affecting Crawl4AI versions prior to 0.8.7. This flaw exists in the Docker API server's /screenshot and /pdf endpoints, allowing unauthenticated attackers to write arbitrary files to any filesystem location accessible by the application's user. The vulnerability has a CVSS score of 9.1, indicating a high severity level. Currently, there are no known public proof-of-concept exploits, but the potential for denial of service and server file overwriting poses a significant risk. Users are advised to upgrade to version 0.8.7 or later to mitigate this issue. If immediate patching is not feasible, restricting access to the affected endpoints is recommended. The vulnerability was first published on July 12, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 95d ago How this analysis works

Timeline

2026-07-12

CVE-2026-56260 published

CVE-2026-56260 was published, detailing a critical arbitrary file write vulnerability in Crawl4AI.

2026-07-13

Vulnerability details confirmed

INCIBE-CERT confirmed the critical nature of CVE-2026-56260 with a CVSS score of 9.1.

2026-07-13

Exploit intelligence reported

Exploit-intel.com reported on the arbitrary file write vulnerability in Crawl4AI, emphasizing its critical impact.

exploit-intel.com

More articles in this cluster (5)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Vulnerability (1)

CVE-2026-56260

Weakness (1)

CWE-22 - Path Traversal

Tool (1)

Docker

Relationships

Docker exploits CVE-2026-56260
CVE-2026-56260 related to CWE-22 - Path Traversal

Following this threat?

Track CVE-2026-56260 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…