Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Docker Server: LLM Credential Exfiltration via Malicious URLs and Environment Variables
GHSA-f989-c77f-r2cq
Summary
A vulnerability in the Docker API server allows attackers to steal sensitive credentials and authentication keys. This can happen when an attacker controls the URL where the server sends requests or when they can access sensitive environment variables. To protect against this, Docker has fixed the issue by ignoring request-supplied URLs and preventing the use of environment variables to access sensitive information.
What to do
- Update unclecode crawl4ai to version 0.8.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| PyPI | unclecode | crawl4ai |
< 0.8.8 Fix: upgrade to 0.8.8
|
| – | crawl4ai | crawl4ai | < 0.8.8 |
Original title
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
Original description
Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by supplying a malicious base_url parameter and setting api_token to env:VARIABLE_NAME to exfiltrate provider API keys and server secrets including JWT SECRET_KEY for authentication bypass.
osv CVSS3.1
8.2
Vulnerability type
CWE-200
Information Exposure
CWE-522
Insufficiently Protected Credentials
CWE-918
Server-Side Request Forgery (SSRF)
Published: 12 Jul 2026 · Updated: 13 Jul 2026 · First seen: 16 Jun 2026