CVE-2026-82275: Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path
Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Qwen-Agentto a version that resolves this vulnerability.Fixed in 0.0.34
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments running Qwen-Agent through version 0.0.34 with the affected unauthenticated Gradio interface exposed are susceptible. The issue allows reading files that are accessible to the server process.
What does an attacker need to exploit this issue?
An attacker needs network access to the unauthenticated Gradio interface and the ability to supply a document path. No authentication or user interaction is required, and absolute file paths can be used.
What is the impact of successful exploitation?
An attacker can read arbitrary files that the Qwen-Agent server process is permitted to access. The reported impact is confidentiality loss; integrity and availability impacts are not indicated.