What’s Vulnerable › Vulnerabilities

CVE-2026-119120: Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-29 · updated 2026-10-29
• Weakness: CWE-502

Description

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python code under PyTorch below 2.6, or exhaust disk and memory.

Affected products

• unclecode crawl4ai: from 0.9.0 before 0.9.5 — fixed in 0.9.5

How to fix

Upgrade to a fixed version: unclecode crawl4ai 0.9.5. Check the vendor advisory for mitigations.

References

• https://github.com/unclecode/crawl4ai/security/advisories/GHSA-f856-7xp9-w3cc
• https://www.vulncheck.com/advisories/crawl4ai-0.9.0-before-0.9.5-untrusted-model-loading-via-cosinestrategy-model-name

Get alerted when CVE-2026-119120 or the next vulnerability affects your stack