CVE-2026-109402

6.3Medium

Published 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

6.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-918

Impact

Authenticated remote attackers can trigger server-side request forgery (SSRF) to access internal network services and resources. They need network access to the Conductor instance and valid user credentials to exploit the MCP service.

Root cause

The MCPService.listTools function improperly validates the mcpServer argument, allowing arbitrary outbound HTTP requests from the server.

Affected systems

conductor-oss conductor 3.22.0

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

Fixed version is not listed in the advisory. Restrict outbound network access from the Conductor server to internal endpoints or disable the MCP AI service integration until an official patch is released.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109402