Threat database

CVE-2026-109405 is a server-side request forgery (SSRF) vulnerability in conductor-oss conductor version 3.33.0-rc10. The flaw exists in the KafkaPublishTask.start function, where manipulation of the kafka_request.bootStrapServers argument can lead to SSRF. The vulnerability can be exploited remotely, and public exploit code is available. The CVSS 4.0 base score is 6.9, indicating a medium severity level.

A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.

CVE-2026-109403 is a server-side request forgery (SSRF) vulnerability in conductor-oss conductor affecting versions 3.32.0 through 3.32.5. The flaw exists in the A2AService.getAgentCard function, where manipulation of the agentUrl argument can lead to SSRF. The vulnerability can be exploited remotely and has been publicly disclosed. The CVSS 4.0 base score is 6.9, indicating medium severity.

CVE-2026-109402 is a server-side request forgery (SSRF) vulnerability in conductor-oss conductor version 3.22.0. It affects the MCPService.listTools function in the MCP Service component. The vulnerability allows remote attackers to manipulate the mcpServer argument to cause SSRF. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported. No patch or remediation information is currently available.

CVE-2026-109190 is a server-side request forgery (SSRF) vulnerability in conductor-oss conductor version 3.31.2. It affects the ListApiToolsTask.start function in the API Tool Configuration component. The vulnerability arises from manipulation of the specUrl argument, allowing remote attackers to induce the server to make unauthorized requests. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3. Exploit details have been publicly disclosed, but no known exploits are currently active in the wild. No patch or remediation information is provided.

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attackers can exploit unsandboxed GraalVM evaluators configured with HostAccess.ALL or allowAllAccess(true) through INLINE, LAMBDA, DO_WHILE, and SWITCH task types to invoke arbitrary system commands via Java reflection or direct subprocess calls.