CVE-2026-124507

A Server-Side Request Forgery (SSRF) vulnerability exists in conductor-oss conductor versions up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1 . The flaw is located within the PLANNER_CONTEXT_FETCH Task Handler, specifically in the WorkflowSystemTask.start function of the PlannerContextFetchTask.java...

CVE-2026-124507: conductor-oss conductor: A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1

A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1. This issue affects the function WorkflowSystemTask.start of the file PlannerContextFetchTask.java of the component PLANNERCONTEXTFETCH Task Handler. The manipulation of the argument url results in...