Firecrawl vulnerabilities
We track 3 vulnerabilities in Firecrawl products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
Latest Firecrawl vulnerabilities
- 7.5 High severity
firecrawl-mcp-server: Improper Limitation of a Pathname to a Restricted Directory
firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal seque
- 9.3 Critical severity
firecrawl: Improper Neutralization of Special Elements used in a Command
Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/a
- 8.6 High severity
Firecrawl: Server-Side Request Forgery
Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy validation is applied only to the initial user-supplied URL and not to subsequent redirect de