CVE-2026-53753 Details.
Crawl4AI <= 0.8.6 - Remote Code Execution
Atlas does not check this one. Needs requests that change data.
To test for this one, the check would have to send requests that could change data on the site. Atlas only ever reads public pages, so it does not run this check.
About CVE-2026-53753. What It Means.
Crawl4AI through 0.8.6 ships a Docker API server that exposes an unauthenticated /crawl endpoint. The computed field type of JsonCssExtractionStrategy evaluates a user supplied expression inside an AST based sandbox that does not restrict attribute access on generator frame objects. A generator expression can therefore reach gi_frame.f_back, walk the caller chain to f_builtins, recover __import__ and execute arbitrary operating system commands as the user running the contain…
Affected Product. What Is Hit.
- Vendor
- unclecode
- Product
- Unclecode CRAWL4AI
References. Where To Read More.
- https://github.com/unclecode/crawl4ai/security/advisories/GHSA-qxjp-w3pj-48m7
- https://github.com/unclecode/crawl4ai/pull/1855
- https://github.com/unclecode/crawl4ai/pull/1886
- https://github.com/pypa/advisory-database/tree/main/vulns/crawl4ai/PYSEC-2026-319.yaml
- https://nvd.nist.gov/vuln/detail/CVE-2026-53753
FAQ
Common Questions.
Crawl4AI <= 0.8.6 - Remote Code Execution. Crawl4AI through 0.8.6 ships a Docker API server that exposes an unauthenticated /crawl endpoint. The computed field type of JsonCssExtractionStrategy evaluates a user supplied expression inside an AST based sandbox that does not restrict attribute access on generator frame objects. A generator expression can therefore reach gi_frame.f_back, walk the caller chain to f_builtins, recover __import__ and execute arbitrary operating system commands as the user running the contain…
No. To test for this one, the check would have to send requests that could change data on the site. Atlas only ever reads public pages, so it does not run this check. The facts about CVE-2026-53753 are on this page, and you can request a demo to see how Brandefense watches your whole external attack surface.
CVE-2026-53753 is not on the CISA Known Exploited Vulnerabilities list at the time of writing, but it is still worth fixing.
Update Unclecode CRAWL4AI to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. Vendor links are listed on this page when they are known.
This page lists the public facts about CVE-2026-53753. Atlas does not run a check for it, so nothing here says whether a particular site is affected.