CVE-2026-124507

A Server-Side Request Forgery (SSRF) vulnerability exists in conductor-oss conductor versions up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1 . The flaw is located within the PLANNER_CONTEXT_FETCH Task Handler, specifically in the WorkflowSystemTask.start function of the PlannerContextFetchTask.java...