Skip to content
OpenAdvisories

Vendor

QwenLM

2 known vulnerabilities.

Products

Qwen-Agent 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-82275

    Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path

    Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files acces…

    QwenLM Qwen-Agent
  • High 7.5
    CVE-2026-82268

    Qwen-Agent Server-Side Request Forgery via Caller-Supplied Document URL

    Qwen-Agent through 0.0.34 contains a server-side request forgery vulnerability in the document parsing path that treats caller-supplied paths as URLs without scheme restriction or host validation. Attackers can reach the unauthenticated Gradio interface to ma…

    QwenLM Qwen-Agent