Product by Conductor-oss

    Conductor

    6 known vulnerabilities in Conductor (Conductor-oss), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Conductor (Conductor-oss)
    CriticalCVE-2026-58138

    Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

    		9.8
    MediumCVE-2026-109404

    conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery

    		5.3
    HighCVE-2026-109403

    Conductor: Server-Side Request Forgery (SSRF)

    		7.3
    HighCVE-2026-109405

    conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery

    		7.3
    MediumCVE-2026-109402

    conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery

    		6.3
    MediumCVE-2026-109190

    Conductor: Server-Side Request Forgery (SSRF)

    		6.3

    News

    All products by Conductor-oss