CVE-2026-109404
MediumCVSS 5.3Summary
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. It affects some unknown functionality of the file AgentController.java of the Agentspan Agent Runtime component. The manipulation leads to server-side request forgery, remotely exploitable.
Risk Assessment
SSRF may allow an attacker to send requests from the server to internal resources, potentially exposing data or enabling further attacks within the internal network.
Recommendation
Update conductor-oss conductor to a version later than 3.33.0-rc10 once a fix is available. Until then, restrict network access to the Agentspan Agent Runtime component.
Other vulnerabilities in conductor-oss conductor
See all- CVE-2026-109405High
A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
- CVE-2026-109403High
A vulnerability was found in conductor-oss conductor up to 3.32.5 in the A2AService.getAgentCard function of A2AService.java, within the Agent Card Fetching component. Manipulating the agentUrl argument allows server-side request forgery, exploitable remotely. The exploit has been publicly disclosed and may be utilized.
- CVE-2026-109402Medium
In conductor-oss conductor 3.22.0, the MCPService.listTools function in MCPService.java (MCP Service component) improperly handles the mcpServer argument, leading to Server-Side Request Forgery (SSRF). The attack can be initiated remotely, and the exploit has been made public.
- CVE-2026-109190Medium
In conductor-oss conductor 3.31.2, the ListApiToolsTask.start function in ListApiToolsTask.java (API Tool Configuration component) improperly handles the specUrl argument, leading to Server-Side Request Forgery (SSRF). The attack can be carried out remotely, and the exploit has been disclosed to the public.
Original NVD description (English source)
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS