Firecrawl SSRF vulnerability allows local network access via malicious scrape target
A server-side request forgery (SSRF) vulnerability in Firecrawl's scraping engine was discovered by a pen-testing team, allowing attackers to craft malicious sites that redirect to local IP addresses. The vulnerability could exfiltrate local network resources through the API. The cloud service was patched on December 27, 2024, and the open-source version on December 29, 2024.
What happened
A pen-testing team discovered an SSRF vulnerability in Firecrawl's scraping engine that could be exploited by crafting a malicious site redirecting to a local IP address.
The vulnerability allowed exfiltration of local network resources through the API.
Reported impact
Firecrawl's cloud service was patched on December 27th, 2024, and the company verified that no user data was exposed by this vulnerability.
Scraping engines in the open-sourced version of Firecrawl were patched on December 29th, 2024, except for the playwright services which the team determined to be un-patchable.
Index analysis
The vulnerability affected Firecrawl versions before 1.1.1 and has a CVSS v3 base score of 7.4, classified as High severity.
The attack vector is Network with Low attack complexity and Low privileges required, with no user interaction required.
Governance controls
The company strongly recommended that open-source users update to version 1.1.1 or later.
For the un-patchable playwright services, the workaround is to supply them with a secure proxy specified through the PROXY_SERVER environment variable, configured to block traffic to link-local IP addresses.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.