CVE-2026-109403
HighCVSS 7.3Summary
A vulnerability was found in conductor-oss conductor up to 3.32.5 in the A2AService.getAgentCard function of A2AService.java, within the Agent Card Fetching component. Manipulating the agentUrl argument allows server-side request forgery, exploitable remotely. The exploit has been publicly disclosed and may be utilized.
Risk Assessment
An attacker can force the server to make requests to arbitrary internal resources, risking data leakage or access to services not exposed externally. Since the exploit is public, the risk of rapid exploitation is high.
Recommendation
Upgrade conductor-oss conductor to a version newer than 3.32.5 as soon as available, and restrict the ability to supply arbitrary URLs in the agentUrl parameter. Until patched, consider validating and whitelisting allowed addresses.
Other vulnerabilities in conductor-oss conductor
See all- CVE-2026-109405High
A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
- CVE-2026-109404Medium
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. It affects some unknown functionality of the file AgentController.java of the Agentspan Agent Runtime component. The manipulation leads to server-side request forgery, remotely exploitable.
- CVE-2026-109402Medium
In conductor-oss conductor 3.22.0, the MCPService.listTools function in MCPService.java (MCP Service component) improperly handles the mcpServer argument, leading to Server-Side Request Forgery (SSRF). The attack can be initiated remotely, and the exploit has been made public.
- CVE-2026-109190Medium
In conductor-oss conductor 3.31.2, the ListApiToolsTask.start function in ListApiToolsTask.java (API Tool Configuration component) improperly handles the specUrl argument, leading to Server-Side Request Forgery (SSRF). The attack can be carried out remotely, and the exploit has been disclosed to the public.
Original NVD description (English source)
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the argument agentUrl can lead to server-side request forgery. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS