CVE-2026-72904

Received Received - Intake

Arbitrary File Read in Firecrawl via Malicious JSON Schema

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: GitHub, Inc.

Description

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/helpers/dereference-schema.ts. The affected code invokes the json-schema-ref-parser dependency with default resolver settings, allowing external and local file references to be resolved during schema processing. An authenticated attacker can supply a malicious schema containing a $ref within default, const, or enum fields that are not traversed by AJV validation. By triggering a dereference error, file contents from the extract worker filesystem may be included in persisted error messages returned through the extraction API, enabling arbitrary file reads and SSRF against internal or external HTTP endpoints. This issue is fixed in version 2.11.32.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2026-72904

Affected Vendors & Products

Vendor	Product	Version / Range
firecrawl	firecrawl	to 2.11.32 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-95	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

Executive Summary

This vulnerability is an arbitrary file read flaw in Firecrawl versions before 2.11.32. It occurs because the software improperly processes user-supplied JSON schemas, allowing attackers to reference external or local files through schema fields like $ref. When the system tries to resolve these references, it may expose file contents in error messages returned via the extraction API.

Detection Guidance

Detecting this vulnerability requires checking the version of Firecrawl installed on your system. If you are running a version prior to 2.11.32, the system is vulnerable. Use commands like 'npm list firecrawl' or 'firecrawl --version' to check the installed version.

Impact Analysis

An attacker could read sensitive files on the system where Firecrawl is running, including configuration files, source code, or other confidential data. They might also exploit this to perform server-side request forgery (SSRF) against internal or external HTTP endpoints, potentially leading to further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection principles and HIPAA's requirements for safeguarding protected health information. Organizations using affected versions may face compliance breaches, legal penalties, and reputational damage.

Mitigation Strategies

Immediately upgrade Firecrawl to version 2.11.32 or later. If using npm, run 'npm update firecrawl' or reinstall the package. Ensure no untrusted schemas are processed by the extraction API and review API access logs for suspicious activity.

Hi! I’m here to help you understand CVE-2026-72904. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70