Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:alibaba:qwen-Agent:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

SSRF Vulnerability in Qwen-Agent Document Parsing

Qwen-Agent version 0.0.34 and earlier contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to force the server to perform arbitrary internal HTTP requests and exfiltrate metadata service content.

Qwen-Agent ssrf vulnerability cloud path-traversal arbitrary-file-read web-application-vulnerability
2t 1c