Skip to content
OpenAdvisories

Product · firecrawl

firecrawl-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85606

    firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

    firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequ…

    firecrawl firecrawl-mcp-server