Live › vulnerability › CVE-2026-116066
Go to dashboardFirecrawl's Playwright service SSRF protection can be bypassed with DNS rebinding, because the host is validated at one address and then connected at a private one. An attacker who controls DNS for a scrape target can reach cloud metadata endpoints and internal services through the scrape API.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 12:40 UTC. All times on this page are UTC.
Self-hosted or managed Firecrawl deployments that run the Playwright scraping service and accept scrape requests from users or untrusted inputs are exposed, since the attacker supplies the target domain. Deployments that only scrape trusted internal URLs and do not accept untrusted target URLs are less exposed. Versions before 2.11.586 are affected.
No product ranges from the sources yet.
firecrawl --version or the tag of the running container, and compare it to 2.11.586.2.11.586 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a public address during validation and a private address at connect time, retrieving cloud metadata and internal resources through the scrape API.
This page as .md · .json · in your agent: get_signal("CVE-2026-116066")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.