Vendor

    Conductor-oss

    6 known vulnerabilities in products by Conductor-oss, 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Conductor-oss
    CriticalCVE-2026-58138

    Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

    		9.8
    MediumCVE-2026-109404

    conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery

    		5.3
    HighCVE-2026-109403

    Conductor: Server-Side Request Forgery (SSRF)

    		7.3
    HighCVE-2026-109405

    conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery

    		7.3
    MediumCVE-2026-109402

    conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery

    		6.3
    MediumCVE-2026-109190

    Conductor: Server-Side Request Forgery (SSRF)

    		6.3

    News

    Products

    Products by Conductor-oss
    Conductor60