Skip to content
OpenAdvisories

Vendor

firecrawl

5 known vulnerabilities.

Products

firecrawl 4 firecrawl-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-85606

    firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

    firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequ…

    firecrawl firecrawl-mcp-server
  • High 8.6
    CVE-2026-32857

    Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation

    Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy validation is applied only to the initial user-supplied URL and not to subsequent redirect d…

    firecrawl firecrawl