Arbitrary Local File Read Vulnerability in Firecrawl-MCP-Server by Firecrawl
CVE-2026-85606

8.7HIGH

Key Information:

Vendor

Firecrawl

Status
Firecrawl-mcp-server
Vendor
CVE Published:
4 September 2026

What is CVE-2026-85606?

The Firecrawl-MCP-Server 3.20.2 contains a vulnerability that allows for arbitrary local file reading. This occurs due to the firecrawl_parse tool accepting filePath arguments without validating their directory containment. As a result, an attacker can exploit this flaw by providing absolute paths or using directory traversal sequences to access sensitive files. This may lead to the exposure of critical information, such as credentials and environment variables, which could then be uploaded or returned to an unauthorized context.

Affected Version(s)

firecrawl-mcp-server 0 <= 3.24.0

References

https://github.com/firecrawl/firecrawl-mcp-server/issues/306
issue-tracking
https://github.com/firecrawl/firecrawl-mcp-server
product
https://github.com/firecrawl/firecrawl-mcp-server/blob/v3...
technical-description

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

George Chen
.