CVE-2026-72904 firecrawl CVE debrief

Who should care

Defenders responsible for Firecrawl deployments, especially those using it for extracting data from websites, should assess exposure and potential impact. They should prioritize verifying exposure and assessing potential impact, especially in environments where Firecrawl is used for extracting data from websites, due to the critical arbitrary file read vulnerability prior to version 2.11.32.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact, especially in environments where Firecrawl is used for extracting data from websites, due to the critical arbitrary file read vulnerability prior to version 2.11.32.

• Potential for arbitrary file reads
• Potential for SSRF against internal or external HTTP endpoints
• Need for verification of exposure and impact
• Priority for upgrading to version 2.11.32 or later

Technical summary

The vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/helpers/dereference-schema.ts. An authenticated attacker can supply a malicious schema containing a $ref within default, const, or enum fields that are not traversed by AJV validation. By triggering a dereference error, file contents from the extract worker filesystem may be included in persisted error messages returned through the extraction API, enabling arbitrary file reads and SSRF against internal or external HTTP endpoints.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, especially in environments where Firecrawl is used for extracting data from websites.

Recommended defensive actions

• Verify Firecrawl version and upgrade to 2.11.32 or later if necessary
• Assess exposure and potential impact in environments where Firecrawl is used
• Monitor for suspicious activity and implement compensating controls if necessary
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, including its description, CVSS score, and affected versions. Defenders should verify exposure and assess potential impact, especially in environments where Firecrawl is used for extracting data from websites. The vulnerability exists due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/helpers/dereference-schema.ts. An authenticated attacker can supply a malicious schema to trigger a dereference error, potentially leading to

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.