Vulnerability · Published Aug 28, 2026 · Assigned by VulnCheck
CVE-2026-82275Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path
High 7.5
In plain English
A high-severity path traversal in Qwen-Agent from QwenLM. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 54.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| QwenLM | Qwen-Agent | 0 – through 0.0.34 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- GitHub Issue #912 issue-tracking
- https://github.com/QwenLM/Qwen-Agent product
- Vulnerable code: utils.py technical-description
- Vulnerable code: simple_doc_parser.py technical-description
- VulnCheck Advisory: Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path third-party-advisory