CVE-2026-82268: Server-Side Request Forgery (SSRF) in QwenLM Qwen-Agent

CVE-2026-82268 describes an SSRF vulnerability in Qwen-Agent through version 0.0.34. The vulnerability exists because the document parsing path accepts caller-supplied paths as URLs without enforcing scheme restrictions or validating hostnames. This allows unauthenticated attackers to access the Gradio interface and force the server to issue HTTP requests to arbitrary internal network addresses, including metadata services. The attacker can then read the content retrieved by these requests through the parsed document output, potentially exposing sensitive internal information.

An unauthenticated attacker can exploit this SSRF vulnerability to make the server perform HTTP requests to internal network resources, including metadata services, which may contain sensitive information. This can lead to unauthorized disclosure of internal data. The vulnerability has a high severity with a CVSS 4.0 score of 8.7, indicating significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the Gradio interface and implement network-level controls to limit server access to internal resources.