CO
Vendor
conductor-oss
1 product with CVEs on record
6
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109405
CO
conductor
conductor-oss
7.3
0%
Oct 13conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery
CVE-2026-109404
CO
conductor
conductor-oss
5.3
0%
Oct 13conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery
CVE-2026-109403
CO
conductor
conductor-oss
7.3
0%
Oct 13conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery
CVE-2026-109402
CO
conductor
conductor-oss
6.3
0%
Oct 13conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery
CVE-2026-109190
CO
conductor
conductor-oss
6.3
0%
Oct 13conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery
CVE-2026-58138
CO
conductor
conductor-oss
9.8
9%
Jun 30Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators