CyberRota Analysis
AI-GeneratedCrawl4AI versions prior to 0.9.3 are vulnerable to an uncontrolled resource consumption issue in the PDFContentScrapingStrategy, enabling untrusted clients to exploit this flaw through POST requests. This can lead to denial of service by allowing attackers to download excessively large remote PDFs, thereby exhausting system resources such as disk space, CPU, and bandwidth. Organizations utilizing Crawl4AI should prioritize updating to the latest version to mitigate this significant risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Crawl4AI before 0.9.3 contains an uncontrolled resource consumption vulnerability in PDFContentScrapingStrategy that allows untrusted clients to cause denial of service. Attackers can select the PDF scraping strategy in POST requests to download large remote PDFs without size or page limits, exhausting disk, CPU, and bandwidth on shared workers.