What’s Vulnerable › Vulnerabilities

CVE-2026-85606: firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-23
• Weakness: CWE-22

Description

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context.

Affected products

• firecrawl-mcp-server: through 3.24.0

References

• https://github.com/firecrawl/firecrawl-mcp-server
• https://github.com/firecrawl/firecrawl-mcp-server/blob/v3.24.1/src/index.ts
• https://github.com/firecrawl/firecrawl-mcp-server/issues/306
• https://www.vulncheck.com/advisories/firecrawl-mcp-server-3.20.2-arbitrary-local-file-read-via-filepath

Get alerted when CVE-2026-85606 or the next vulnerability affects your stack