CVE ID :CVE-2026-57572 Published : July 6, 2026, 9:16 p.m. | 1 hour, 57 minutes ago Description :Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch...

#Sicherheitslücke #Cloud #Browser #AI

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-57572 - Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

VERWANDTEARTIKEL

CVE-2026-46242

CVE-2026-42153 - Coolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container

CVE-2026-42204 - Coolify: Authenticated RCE via SHELL_SAFE_COMMAND_PATTERN regression → host root

CVE-2026-43918 - Suspended or inactive FOSSBilling accounts can retain or regain access through existing sessions, API tokens, and password reset flows

CVE-2026-43921 - FOSSBilling vulnerable to arbitrary PHP code injection via unescaped config serialization

CVE-2026-34153 - Coolify LocalFileVolume fs_path command injection enables RCE