CVE-2026-82268: Qwen-Agent Server-Side Request Forgery via Caller-Supplied Document URL
Qwen-Agent through 0.0.34 contains a server-side request forgery vulnerability in the document parsing path that treats caller-supplied paths as URLs without scheme restriction or host validation. Attackers can reach the unauthenticated Gradio interface to make the server issue HTTP requests to arbitrary internal addresses including metadata services and read retrieved content through parsed document output.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Qwen-Agentto a version that resolves this vulnerability.Fixed in 0.0.34
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of Qwen-Agent through 0.0.34 that expose the unauthenticated Gradio interface are exposed. An attacker only needs network access to that interface; no credentials or user interaction are required.
What can an attacker access through the vulnerable endpoint?
An attacker can supply a document path that is treated as a URL and cause the server to issue HTTP requests to arbitrary internal addresses, including metadata services. Retrieved content can be read through the parsed document output.
Is a default deployment affected?
The affected interface is described as unauthenticated, so deployments exposing that Gradio interface should be treated as affected unless access has been restricted. The available information does not identify any scheme or host restrictions that would prevent requests to internal targets.