THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-72904 — Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/h

[NVD] CVE-2026-72904 — Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/h

lownvdPublished 2026-08-10

CVE-2026-72904 CVSS: None Published: 2026-08-10T21:17:25.117

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/api/src/lib/extract/helpers/dereference-schema.ts. The affected code invokes t

Indicators of compromise

CVE-2026-72904cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-72904