---
id: CVE-2026-82286
title: >-
  gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in
  the POST /crawl endpoint, allowing unauthenticated attackers to write
  arbitrary files to any filesystem path
summary: >-
  gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in
  the POST /crawl endpoint, allowing unauthenticated attackers to write
  arbitrary files to any filesystem path. Attackers can supply absolute paths or
  parent-direc…
severity: high
cvss: 8.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L'
cwe:
  - CWE-22
published: '2026-08-28'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T17:17:43.763'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82286'
references:
  - url: 'https://github.com/BuilderIO/gpt-crawler'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/BuilderIO/gpt-crawler/blob/d2245d66a5ad60bf227a55c849135394cbecc9b5/src/config.ts
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/BuilderIO/gpt-crawler/blob/d2245d66a5ad60bf227a55c849135394cbecc9b5/src/core.ts
    label: disclosure@vulncheck.com
  - url: 'https://github.com/BuilderIO/gpt-crawler/issues/418'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/gpt-crawler-arbitrary-file-write-via-outputfilename-parameter
    label: disclosure@vulncheck.com
  - url: 'https://github.com/BuilderIO/gpt-crawler/issues/418'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - exploit-available
  - cve.org
epss: 0.00524
epssPercentile: 0.41968
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/BiiTts/CVE-2026-82286-gpt-crawler-Arbitrary-File-Write'
  checkedAt: '2026-09-25T08:21:16.356Z'
exploitAvailable: true
ingestedAt: '2026-09-23T17:28:14.816Z'
vendor: BuilderIO
product: gpt-crawler
affected:
  - gpt-crawler <= 1.5.1
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-08-31T18:59:10.770458Z'
---

## Overview

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourced from attacker-controlled URLs.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.