CVE-2026-56258 - Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU
CVE ID :CVE-2026-56258 Published : June 23, 2026, 12:12 p.m. | 57 minutes ago Description :Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink...