firecrawl-mcp-server vulnerabilities

CVEs whose affected-version data names the firecrawl-mcp-server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85606High· 7.5

2w ago

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or di…

▾ Twilightfirecrawl · firecrawl-mcp-serverEPSS 0.70%via NVD