TI-2026-71644 CVE-2026-109404 · GHSA-fhq7-8m85-r6m9
conductor-oss conductor Agentspan Agent Runtime server-side request forgery
Priority HIGH 70
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10.
conductor-oss
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
conductor-oss records in CISA KEVNo conductor-oss vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-71643 CVE-2026-109403 · GHSA-5469-w5gg-3qjr
Server-side request forgery in conductor-oss Agent Card fetching
Priority HIGH 70
A vulnerability was determined in conductor-oss conductor up to 3.32.5.
TI-2026-41860 CVE-2026-58138 · GHSA-7x5q-8f6h-rjrc
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
Priority MEDIUM 60
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing mal…
Priority MEDIUM 57
A vulnerability was found in conductor-oss conductor 3.22.0.
TI-2026-71645 CVE-2026-109405 · GHSA-8q7f-vg4q-39mm
Server-side request forgery in conductor-oss Conductor Kafka task
Priority LOW 30
A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10.
Priority LOW 24
A vulnerability has been found in conductor-oss conductor 3.31.2.