CVE-2026-116066

The Firecrawl software version before 2.11.586 is vulnerable to a Server-Side Request Forgery (SSRF) in the Playwright service SSRF proxy. The root cause is a DNS rebinding flaw that allows attackers to bypass isInternalHost checks. By controlling the DNS for a scrape target, an attacker can prov...