Cconductor-oss

Products

Exploited and recent CVEs

• CVE-2026-109405 High 7.3 conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery 0.3%
• CVE-2026-109404 Medium 5.3 conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery 0.5%
• CVE-2026-109403 High 7.3 conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery 0.4%
• CVE-2026-109402 Medium 6.3 conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery 0.3%
• CVE-2026-109190 Medium 6.3 conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery 0.3%
• CVE-2026-58138 Critical 9.8 Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators 9.1%