Description
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| conductor-oss | conductor | 3.33.0-rc10 | — |
References
- VDB-416946 | conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery vdb-entry
- VDB-416946 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-109404 | CVE Analysis and Report third-party-advisory
- Submit #979792 | Conductor OSS Conductor >= 3.31.2 server-side request forgery (CWE-918) third-party-advisory