CVE-2026-109404 | conductor-oss conductor up to 3.33.0-rc10 Agentspan Agent Runtime AgentController.java server-side request forgery

October 12, 2026 Yanac

A vulnerability marked as problematic has been reported in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-109404. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More