Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-109402: Conductor OSS lets attackers send internal network requests
CVE-2026-109402 · published 5 days ago
Summary
The MCP Service in Conductor OSS version 3.22.0 can be tricked into contacting any address you specify. This could let a remote attacker make the server talk to internal systems or external sites, potentially exposing sensitive data. Update to a patched version or apply the vendor’s recommended configuration changes as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| conductor-oss | conductor | 3.22.0 |
Original advisory text
conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery
A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
2.1
Low
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published13 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta