← Back to Dashboard

CVE-2026-109402

MEDIUM NVD
CVSS Score
6.3
Severity
MEDIUM
Source
NVD
Published
Oct 13, 2026
Description

A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used.

View Full Details ← Back