CVE-2026-85606
firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 4, 2026
- Updated
- Sep 14, 2026
- Reserved
- Sep 4, 2026
Description
firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
firecrawl-mcp-serverfirecrawl |
|
References
- GitHub Issue #306issue-tracking
- https://github.com/firecrawl/firecrawl-mcp-serverproduct
- https://github.com/firecrawl/firecrawl-mcp-server/blob/v3.24.1/src/index.tstechnical-description
- VulnCheck Advisory: firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePaththird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.