CVE-2026-109404
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.