CVE-2026-116066 Firecrawl CVE debrief

Who should care

Defenders responsible for Firecrawl deployments, cloud security, and internal network security should assess exposure and prioritize updates and additional security controls. Defenders should prioritize verifying and updating Firecrawl to version 2.11.586 or later, and assess exposure of internal resources and cloud metadata. This includes reviewing compensating controls for exposed systems while remediation is scheduled and verified.

Why it matters

Defenders should prioritize verifying and updating Firecrawl to version 2.11.586 or later, and assess exposure of internal resources and cloud metadata, as this SSRF vulnerability could allow attackers to bypass internal host checks and potentially retrieve sensitive information.

• Potential retrieval of cloud metadata and internal resources
• Bypassing of internal host checks via DNS rebinding
• Exposure of internal resources through the scrape API
• Verification of Firecrawl version and update to 2.11.586 or later

Technical summary

The vulnerability exists in Firecrawl's Playwright service SSRF proxy, allowing attackers to bypass internal host checks via DNS rebinding. This could potentially allow retrieval of cloud metadata and internal resources through the scrape API. Attackers controlling DNS for a scrape target can return a public address during validation and a private address at connect time. Defenders should prioritize verifying and updating Firecrawl to version 2.11.586 or later, and assess exposure of internal resources and cloud metadata.

Defensive priority

Defenders should prioritize verifying and updating Firecrawl to version 2.11.586 or later, and assess exposure of internal resources and cloud metadata.

Recommended defensive actions

• Verify Firecrawl version and update to 2.11.586 or later
• Assess exposure of internal resources and cloud metadata
• Monitor for suspicious activity on internal networks
• Implement additional security controls to prevent SSRF attacks
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability allows attackers controlling DNS for a scrape target to bypass isInternalHost checks, potentially retrieving cloud metadata and internal resources through the scrape API. Attackers can return a public address during validation and a private address at connect time. This issue affects Firecrawl versions before 2.11.586. Defenders should verify and update Firecrawl to version 2.11.586 or later. The vulnerability exists in Firecrawl's Playwright service SSRF proxy, allowing attackers to bypass internal host checks via

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.