CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-72904?
CVE-2026-72904 is a critical vulnerability in firecrawl, published on 10 Aug 2026.
Official description
Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/helpers/dereference-schema.ts. The affected code invokes the json-schema-ref-parser dependency with default resolver settings, allowing external and local file references to be resolved during schema processing. An authenticated attacker can supply a malicious schema containing a $ref within default, const, or enum fields that are not traversed by AJV validation. By triggering a dereference error, file contents from the extract worker filesystem may be included in persisted error messages returned through the extraction API, enabling arbitrary file reads and SSRF against internal or external HTTP endpoints. This issue is fixed in version 2.11.32.
Which versions are affected by CVE-2026-72904?
How do I fix CVE-2026-72904?
No fix has been published for CVE-2026-72904 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-72904 being exploited?
There is no known exploitation of CVE-2026-72904 in the wild and no public exploit code.
Sources
Also known as GHSA-3p54-jg6f-68r8.