CVE-2026-109405

A flaw was found in conductor. A remote attacker can trigger Server-Side Request Forgery SSRF by supplying a manipulated bootstrap server parameter in a Kafka publish task. This flaw enables the application to initiate unauthorized connections to arbitrary internal or external network resources,...