{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/conductor--3.32.5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:conductor-oss:conductor:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-109403"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["conductor (\u003c= 3.32.5)","Conductor (\u003c= 3.33.0-rc10)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Conductor-OSS"],"content_html":"\u003cp\u003eThe Conductor-OSS workflow orchestration platform contains a Server-Side Request Forgery (SSRF) vulnerability in the A2AService component. Specifically, the getAgentCard function within 'ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java' fails to properly sanitize the 'agentUrl' argument. A remote, unauthenticated attacker can supply a malicious URL to this parameter, causing the Conductor server to make unauthorized requests to arbitrary internal or external targets. This vulnerability may be used to probe internal network services, access metadata services in cloud environments, or potentially bypass internal firewall controls. The flaw is present in all versions of Conductor up to and including 3.32.5.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to perform internal reconnaissance, potentially access sensitive cloud metadata services, or interact with services inside the network perimeter that are not otherwise accessible. This could lead to information disclosure or serve as a pivot point for further internal network exploitation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade to a version of Conductor-OSS that patches CVE-2026-109403.\u003c/li\u003e\n\u003cli\u003eImplement strict allow-listing for outbound requests originating from the Conductor-OSS application server.\u003c/li\u003e\n\u003cli\u003eMonitor web access logs for anomalous requests to the A2AService component, particularly those containing suspicious internal IP addresses or private URI schemes in the agentUrl parameter.\u003c/li\u003e\n\u003cli\u003eEnsure the Conductor process is running with the least privilege necessary, particularly concerning network egress capabilities.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-13T14:36:58Z","date_published":"2026-10-13T14:36:50Z","id":"https://feed.craftedsignal.io/briefs/2026-10-conductor-ssrf/","summary":"An SSRF vulnerability in the Conductor-OSS A2AService allows remote attackers to manipulate the agentUrl parameter to force unauthorized internal requests.","title":"SSRF Vulnerability in Conductor A2AService","url":"https://feed.craftedsignal.io/briefs/2026-10-conductor-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Conductor (\u003c= 3.32.5)","version":"https://jsonfeed.org/version/1.1"}