B3NCLOUD ARTICLE INTELLIGENCE

ARTICLEVIEW

Zurück zu News

CVE-2026-56258 - Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU

CVE ID :CVE-2026-56258 Published : June 23, 2026, 12:12 p.m. | 57 minutes ago Description :Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink...

Original-Artikel öffnen Zurück zur Übersicht