TagsTags

sandbox-escape

1 entry1 entrada

exploitJul 25, 2026CVE-2026-26216
CVE-2026-26216: Crawl4AI unauthenticated RCE via hooks
A single unauthenticated JSON POST to Crawl4AI's /crawl endpoint executes Python as root — the homemade builtins sandbox kept __import__ on the allowlist. Dockerized lab plus a stdlib-only exploit.
cvercecrawl4aisandbox-escapepoc

exploit25 jul 2026CVE-2026-26216
CVE-2026-26216: RCE não autenticada no Crawl4AI via hooks
Um único POST JSON não autenticado no endpoint /crawl do Crawl4AI executa Python como root — o sandbox caseiro de builtins deixou __import__ na allowlist. Lab dockerizado e exploit usando só a stdlib.
cvercecrawl4aisandbox-escapepoc

All tags →Todas as tags →