Skip to content
OpenAdvisories

Vendor

conductor-oss

7 known vulnerabilities.

Products

conductor 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-109405

    conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery

    A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argume…

    conductor-oss conductor
  • High 7.3
    CVE-2026-109403

    conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery

    A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching.…

    conductor-oss conductor