CVE-2026-109190

A server-side request forgery (SSRF) vulnerability exists in conductor-oss conductor version 3.31.2 . The flaw is located within the API Tool Configuration component, specifically affecting the ListApiToolsTask.start function in the ListApiToolsTask.java file. An attacker can trigger the SSRF rem...