{"id":"CVE-2026-109404","published":"2026-10-13T13:17:18.947","lastModified":"2026-10-13T13:29:12.567","description":"A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://vuldb.com/cve/CVE-2026-109404","tags":[]},{"url":"https://vuldb.com/submit/979792","tags":[]},{"url":"https://vuldb.com/vuln/416946","tags":[]},{"url":"https://vuldb.com/vuln/416946/cti","tags":[]},{"url":"https://vuldb.com/submit/979792","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}