Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
Crawl4AI, an open-source web crawling tool, is affected through its Docker API server, where authenticated clients can submit regular expressions in crawl requests that take excessive time to evaluate. A malicious request can make the server stop responding entirely, including its health-check endpoint, causing a denial of service for all users.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via RegexExtractionStrategy.custom, RegexChunking.patterns or JsonCss, JsonXPath and JsonLxml schema regex fields against a crafted page to freeze the entire server, including /health.
Affected versions
- unclecode crawl4ai
From 0.7.0 · fixed in 0.9.5