Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-85606firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

High 7.5

In plain English

A high-severity path traversal in firecrawl-mcp-server from firecrawl. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.9%top 40.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context.

Affected products (as reported)

Vendor	Product	Versions
firecrawl	firecrawl-mcp-server	0 – through 3.24.0

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

GitHub Issue #306 issue-tracking
https://github.com/firecrawl/firecrawl-mcp-server product
https://github.com/firecrawl/firecrawl-mcp-server/blob/v3.24.1/src/index.ts technical-description
VulnCheck Advisory: firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath third-party-advisory