A critical arbitrary file read and SSRF vulnerability in Firecrawl allows unauthenticated remote attackers to compromise internal server data and interact with internal network endpoints.

The vulnerability stems from unsafe schema dereferencing in the extraction functionality, where user-supplied JSON schemas are processed with default resolver settings, allowing unauthorized access to local files and internal network resources.

Successful exploitation allows an attacker to read sensitive configuration files, credentials, or internal data stored on the host filesystem. With a CVSS score of 9.3, the risk of full system compromise or internal network scanning via SSRF is high, potentially leading to a broader breach of the hosting environment.

Immediate Action: Update firecrawl to version 2.11.32 or later immediately to resolve the unsafe schema dereferencing.

Proactive Monitoring: Monitor the application for unexpected outbound network connections from the extraction worker and review logs for suspicious schema submissions containing unexpected file paths or internal IP addresses.

Compensating Controls: Deploy a Web Application Firewall with rules designed to detect and block malicious JSON payloads, and ensure the extraction worker runs with the least privilege possible to limit filesystem access.

Public Exploit Available: Unknown

Given the critical nature of this vulnerability and its potential for unauthenticated remote exploitation, it should be treated with the highest urgency. Patching is the only reliable method to eliminate the underlying flaw in the schema processing logic.