CVE-2026-109404 — conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the compone…
Published: 2026-10-13 · CVSS: 6.9 · CVSS 4.0
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7