CVE-2026-85606 firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawlparse tool that accepts unconstrained filePath arguments without directory containment validation. Attackers can supply absolute paths or directory traversal sequences to read sensitive files like...