Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-109404

conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery

Description

A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

conductor-oss conductor

  • 3.33.0-rc10affected

References