CVE-2026-85606CWE-22path-traversal

CVE-2026-85606

High · published September 4, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like credentials and environment variables, which are then uploaded and returned to the model context.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00897 · 59.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-04T19:17Z
References (4)
https://github.com/firecrawl/firecrawl-mcp-server · [email protected]https://github.com/firecrawl/firecrawl-mcp-server/blob/v3.24.1/src/index.ts · [email protected]https://github.com/firecrawl/firecrawl-mcp-server/issues/306 · [email protected]https://www.vulncheck.com/advisories/firecrawl-mcp-server-3.20.2-arbitrary-local-file-read-via-filepath · [email protected]
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 1%
    epss
  • 04 SEP 14:32Z
    firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath
    cvelistv5