Ai-Security — PoC Archivehttps://poc.intelseclab.com/tags/ai-security/Latest proof-of-concept entries.Hugoen-usMon, 27 Jul 2026 00:00:00 +0000Crawl4AI JsonCssExtractionStrategy AST Sandbox Escape → Unauthenticated RCE (CVE-2026-53753)https://poc.intelseclab.com/pocs/web/2026-07-27_cve-2026-53753-crawl4ai-sandbox-escape-rce/Mon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-27_cve-2026-53753-crawl4ai-sandbox-escape-rce/Critical severity (CVSS 9.8) — web · CVE-2026-53753 (GHSA-qxjp-w3pj-48m7). Status: Weaponized — full end-to-end command execution reproduced against the official unclecode/crawl4ai:0.8.6 image. Affects: Crawl4AI — open-source LLM-friendly web crawler/scraper, Docker API server. Tags: crawl4ai, sandbox-escape, rce, python, ast-bypass, unauthenticated, llm-tooling, ai-security.webCriticalcrawl4aisandbox-escapercepythonast-bypassunauthenticatedllm-toolingai-securityLangflow Pre-Auth RCE Mass Scanner (CVE-2026-27966)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27966-langflow-mass-scanner/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27966-langflow-mass-scanner/Critical severity (CVSS 9.8) — web · CVE-2026-27966 (GHSA-3645-fxcv-hqr4). Status: Patched. Affects: Langflow (langflow-ai). Tags: langflow, rce, pre-auth, route-injection, vertex-injection, csv-agent, prompt-injection, python, mass-scanner, ai-security.webCriticallangflowrcepre-authroute-injectionvertex-injectioncsv-agentprompt-injectionpythonmass-scannerai-security