Firecrawl’s extraction feature uses the json-schema-ref-parser library with default resolver settings, allowing a malicious JSON schema that includes a $ref inside default, const, or enum fields to be dereferenced during processing. Because AJV does not traverse these fields, a dereference error can occur that is caught by Firecrawl’s error handling. The resulting error message, which is returned through the extraction API, can contain the contents of files read from the extract worker’s filesystem or the body of external HTTP responses. This enables authenticated attackers to read arbitrary files on the host and perform SSRF attacks against internal or external HTTP endpoints. The weakness involves unsafe external resource resolution (CWE‑77), local file inclusion (CWE‑78), code injection through schema parsing (CWE‑94), and potential remote code execution paths (CWE‑95).

The vulnerability affects the Firecrawl application (firecrawl:firecrawl) running any version earlier than 2.11.32. The error occurs in the extraction API used by authenticated users to turn webpages into markdown or structured data.

The CVSS score of 9.3 indicates a high severity vulnerability that can compromise confidentiality through file reads and potentially availability through SSRF. No EPSS data is available, and the vulnerability is not listed in CISA KEV. An attacker with valid credentials can submit a crafted schema via the extraction API, trigger the dereference error, and obtain sensitive data or reach internal services. The exploitation requires no special network configuration beyond the usual API access and can be performed without additional privileges once authentication is achieved.