CVE-2026-53753
Code injection in Kidocode Crawl4ai
CVSS score
10.0
EPSS probability
%2.9
Risk score
0.3
Published
3 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e.
Makefile Go / Python
GitHub
Crawl4AI <= 0.8.6 pre-auth RCE via AST sandbox escape (gi_frame.f_back.f_builtins chain) — CVSS 10.0
Makefile Go / Python
Nuclei: Crawl4AI <= 0.8.6 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2026-26216
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
U
Patch status unknown Public Exploits:1EPSS %6
9.2
CVE-2026-26217
Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling
U
Patch status unknown Public Exploits:1EPSS %2
7.5
CVE-2026-53755
Server-side request forgery in Kidocode Crawl4ai
K
Patch status unknown Public Exploits:1EPSS %2
10.0
CVE-2026-57572
Code injection in Kidocode Crawl4ai
K
Patch verifiedEPSS %1
9.6
CVE-2026-57571
Path traversal in Kidocode Crawl4ai
K
Patch verified Public Exploits:1EPSS %1
9.1
CVE-2026-56260
Path traversal in Kidocode Crawl4ai
K
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53753"