medium5.3
CVE-2026-109404
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10.
Impact
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.
Affected products
| Product | Affected versions |
|---|---|
| Conductor-Oss Conductor | before 3.33.0-rc10. |
Versions were read from the advisory text. No structured product data has been published for this record yet.