CVE-2026-109402: conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery
A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
Who can realistically exploit this issue?
A remote attacker with low privileges can exploit the issue. Exploitation does not require user interaction, but it requires the ability to manipulate the mcpServer argument used by the MCP Service.
What component and code path should defenders prioritize?
Prioritize the MCP Service in conductor-oss conductor 3.22.0, specifically MCPService.listTools in ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java. Review where untrusted users or integrations can supply or influence the mcpServer value.
Is there evidence that exploitation is practical?
Yes. A public exploit has been reported, and the vulnerability is rated as having proof-of-concept exploit maturity (E:P).
What is the potential impact if exploitation succeeds?
The reported severity vector indicates low confidentiality, integrity, and availability impact. The SSRF condition could allow a remote, low-privileged attacker to cause the affected service to make requests based on a manipulated mcpServer argument.