Read the docs

QwenLM

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

QwenLM records in CISA KEV

No QwenLM vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-56740 CVE-2026-82275 · GHSA-8cjm-vc75-p97h

Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path

Priority HIGH 77

Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00548 Published 2026-08-28 No fix listed CWE-22
TI-2026-56733 CVE-2026-82268 · GHSA-h9q8-qvr9-h4c6

Qwen-Agent Server-Side Request Forgery via Caller-Supplied Document URL

Priority HIGH 77

Qwen-Agent through 0.0.34 contains a server-side request forgery vulnerability in the document parsing path that treats caller-supplied paths as URLs without scheme restriction or host validation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00482 Published 2026-08-28 No fix listed CWE-918
Open these records in search →