{"id":"CVE-2026-119118","kind":"vulnerability","aliases":["CVE-2026-119118"],"related":[],"title":"Crawl4AI: certificate checks disabled, letting network attackers intercept crawls","description":"Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launches with --ignore-certificate-errors. Man-in-the-middle or DNS-controlling attackers can serve forged content to the crawler and read cookies and headers sent, while hard-coded --no-sandbox also overrides CRAWL4AI_CHROMIUM_SANDBOX.","summary":"Crawl4AI launches Chromium with certificate errors ignored, so a network attacker can impersonate sites the crawler visits. The attacker can serve forged content and read cookies and headers the crawler sends.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["crawl4ai","package","python","web-scraping"],"not_affected_if":["isolated-network-only","version-0.9.5-or-later"],"how_to_check":"- Check the installed Crawl4AI version with `pip show crawl4ai` and compare it against `0.9.5`.\n- Look for `--ignore-certificate-errors` in the Chromium launch arguments of the crawler configuration.","fix":"- Upgrade Crawl4AI to `0.9.5` or later.","status":"open","published_at":"2026-10-29T16:18:04+00:00","first_seen_at":"2026-10-29T16:25:57+00:00","triaged_at":"2026-10-29T16:29:30+00:00","updated_at":"2026-10-29T16:29:30+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-29T16:29:30Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Crawl4AI to `0.9.5` or later.","reach":"network","title":"Crawl4AI: certificate checks disabled, letting network attackers intercept crawls","impact":"medium","summary":"Crawl4AI launches Chromium with certificate errors ignored, so a network attacker can impersonate sites the crawler visits. The attacker can serve forged content and read cookies and headers the crawler sends.","audience":"developers","category":"package","nicknames":[],"who_cares":["crawl4ai","python","web-scraping"],"confidence":0.8,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reads cookies and headers and serves forged page content to the crawler","analyst_note":"","how_to_check":"- Check the installed Crawl4AI version with `pip show crawl4ai` and compare it against `0.9.5`.\n- Look for `--ignore-certificate-errors` in the Chromium launch arguments of the crawler configuration.","plain_action":"","needs_analyst":false,"not_affected_if":["version-0.9.5-or-later","isolated-network-only"],"who_is_affected":"Any deployment running Crawl4AI before `0.9.5` that fetches web pages over networks an attacker can observe or influence, such as shared networks or hosts that rely on DNS the attacker controls. Teams that only crawl trusted internal targets on isolated networks face less exposure. The sources do not say whether the sandbox override matters outside Docker or container setups.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000695,"input_tokens":4174,"output_tokens":555,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-119118':12A,15A '-2026':11A,14A '0.9.5':55C 'allow':63C 'also':108C 'alway':71C 'attack':7A,32B,40B,65C,87C 'certif':2A,26B,59C,76C 'check':3A 'chromium':24B,70C,111C 'code':104C 'contain':56C 'content':44B,91C 'control':86C 'cooki':47B,97C 'crawl':9A,68C 'crawl4ai':1A,16B,22B,53C,110C 'crawler':37B,51B,94C 'cve':10A,13A 'disabl':4A 'dns':85C 'dns-control':84C 'error':27B,77C 'forg':43B,90C 'hard':103C 'hard-cod':102C 'header':49B,99C 'ignor':28B,75C 'ignore-certificate-error':74C 'imperson':34B 'improp':58C 'intercept':8A,67C 'launch':23B,72C 'let':5A 'man':79C 'man-in-the-middl':78C 'middl':82C 'network':6A,31B,64C 'no-sandbox':105C 'overrid':109C 'packag':17B 'python':18B 'read':46B,96C 'sandbox':107C,112C 'scrape':21B 'send':52B 'sent':100C 'serv':42B,89C 'site':35B 'valid':60C 'visit':38B 'vulner':61C 'web':20B 'web-scrap':19B","nicknames":[],"mitigations":[],"who_affected":"Any deployment running Crawl4AI before `0.9.5` that fetches web pages over networks an attacker can observe or influence, such as shared networks or hosts that rely on DNS the attacker controls. Teams that only crawl trusted internal targets on isolated networks face less exposure. The sources do not say whether the sandbox override matters outside Docker or container setups.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"first_public_at":"2026-10-29T16:18:04+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119118","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119118","severity":null,"published_at":"2026-10-29T16:18:04+00:00","modified_at":"2026-10-29T16:18:04+00:00","first_seen_at":"2026-10-29T16:25:57+00:00","fetched_at":"2026-10-29T16:25:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}