High severity7.5NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026

CVE-2026-119120

Description

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python code under PyTorch below 2.6, or exhaust disk and memory.

Affected products

Unclecode/Crawl4aillm-fuzzy
Range: <0.9.5

Patches

Vulnerability mechanics

References

github.com/unclecode/crawl4ai/security/advisories/GHSA-f856-7xp9-w3ccnvd
www.vulncheck.com/advisories/crawl4ai-0.9.0-before-0.9.5-untrusted-model-loading-via-cosinestrategy-model-namenvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000