CVE-2026-57572

🎯 CVE-2026-57572 🧪 PoC 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-57572 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.

Klassifikation & Betroffenheit:

CWE-88CWE-94 unclecode Crawl4AI < 0.9.0kidocode crawl4ai *

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

🛡️ Empfohlene Mitigation: Where possible, avoid building a single string that contains the command and its arguments. Some languages or frameworks have functions that support specifying independent arguments, e.g. as an array, which is used to automatically perform the appropriate quoting or escaping while building the command. For example, in …

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-41 · Using Meta-characters in E-mail Headers … (High) CAPEC-88 · OS Command Injection (High) CAPEC-137 · Parameter Injection (Medium) CAPEC-174 · Flash Parameter Injection (Medium) CAPEC-460 · HTTP Parameter Pollution (HPP) (Medium)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-65770 10.0 CVE-2026-26216 10.0 CVE-2024-39930 9.9 CVE-2026-54337 9.8 CVE-2026-53753 9.8

🩹 Patch verfügbar (OSV):

🩹 c66f3276fd355031c8632500911fe7041ad6fc14 (Commit) 🩹 60886d1a0c52682e4c83a7cef9dfac417fff6bd2 (Commit)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 07/2026

Heute 20.10.

CVSS-Vektor-Analyse: 10.0

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CNA-Bewertung (GitHub_M): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Veröffentlicht:06.07.2026

Aktualisiert:08.07.2026 20:16

Assigner (CNA):GitHub_M

EUVD-ID:EUVD-2026-41936

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-88 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	726	0,2 %
≥50 %	3.222	0,9 %
≥10 %	22.088	5,9 %
<10 %	346.305	93,0 %

Tier

CVEs

Anteil

≥90 %

726

0,2 %

≥50 %

3.222

0,9 %

≥10 %

22.088

5,9 %

<10 %

346.305

93,0 %

Noch keine Analyse zu CVE-2026-57572

Beitrag zu CVE-2026-57572 verfassen

Zero-Day & Vulnerability Intelligence Hub