Vulnerability Description
Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a public address during validation and a private address at connect time, retrieving cloud metadata and internal resources through the scrape API.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/firecrawl/firecrawl
- https://github.com/firecrawl/firecrawl/blob/5c198a7d9376fef21a7f6d74313fc9578427
- https://github.com/firecrawl/firecrawl/commit/5e74ff37b41ac650d6bccff170a9be0a6d
- https://github.com/firecrawl/firecrawl/issues/5256
- https://www.vulncheck.com/advisories/firecrawl-before-2.11.586-ssrf-protection-b
- https://github.com/firecrawl/firecrawl/issues/5256
FAQ
What is CVE-2026-116066?
CVE-2026-116066 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers c...
How severe is CVE-2026-116066?
CVE-2026-116066 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-116066?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.