An unauthenticated arbitrary local file read vulnerability in firecrawl-mcp-server allows remote attackers to access sensitive system files, posing a critical risk to environment integrity.

The vulnerability exists in the firecrawl_parse tool, which fails to sanitize the filePath input parameter. An unauthenticated attacker can supply absolute paths or directory traversal sequences to read arbitrary files from the host filesystem, including sensitive credentials and environment variables.

Successful exploitation of this vulnerability allows unauthorized access to sensitive files, which may contain API keys, database credentials, or system configuration data. Given the CVSS score of 7.5, this is a high-severity issue that could lead to full compromise of the application environment or associated cloud services, resulting in significant data breaches and operational disruption.

Immediate Action: Update firecrawl-mcp-server to version 3.24.1 or later, which includes the necessary directory containment validation.

Proactive Monitoring: Monitor application logs for suspicious access patterns involving file system paths or directory traversal sequences (such as ../) within tool arguments.

Compensating Controls: Implement strict network access controls to limit exposure of the MCP server to trusted clients only, and ensure the service runs with the least privilege required for its tasks.

Public Exploit Available: Unknown

The arbitrary local file read vulnerability presents a direct path to credential theft and system compromise. Administrators must prioritize updating to the patched version immediately to prevent potential exploitation. If an immediate update is not feasible, restrict access to the affected service to mitigate the risk of unauthorized traversal attempts.