# CVE-2026-109190: conductor-oss conductor server-side request forgery in API Tool Configuration

Source: https://junglewise.ai/threats/cve-2026-109190-a-vulnerability-has-been-found-in-conductor-oss-conductor-3-31-2  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-109190 · Severity: medium · CVSS 6.3 · Published 2026-10-13

Conductor is an orchestration platform used to manage complex workflows and microservices. A server-side request forgery vulnerability in the API Tool Configuration component allows remote attackers to make the server perform unintended HTTP requests, potentially accessing internal systems or exfiltrating data.

Technologies: [Conductor-Oss Conductor](https://junglewise.ai/threats/technologies/conductor-oss-conductor). Vendors: [Conductor-Oss](https://junglewise.ai/threats/vendors/conductor-oss).

## Quick answers

**Is CVE-2026-109190 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-109190 being exploited in the wild.

**How severe is CVE-2026-109190?** Medium severity, with a CVSS score of 6.3, published 13 October 2026.

**Which products and versions are affected?** Conductor-Oss Conductor 3.31.2.

**Is there a fix for CVE-2026-109190?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-109190 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-109190?** Check whether you run Conductor-Oss Conductor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the ListApiToolsTask.start function of ListApiToolsTask.java, where the specUrl parameter is not properly validated before being used in server requests. An attacker can send a crafted request with a malicious specUrl argument to trigger SSRF, allowing them to access internal resources or perform actions on behalf of the server. The attack is remotely exploitable without authentication.

## Affected products

- conductor-oss conductor 3.31.2

## Timeline

- 2026-10-13: disclosed

## References

- [https://vuldb.com/cve/CVE-2026-109190](https://vuldb.com/cve/CVE-2026-109190)
- [https://vuldb.com/submit/979789](https://vuldb.com/submit/979789)

## Related threats

- [Conductor server-side request forgery in PLANNER_CONTEXT_FETCH task handler](https://junglewise.ai/threats/cve-2026-124507-a-vulnerability-was-found-in-conductor-oss-conductor-up-to-3-32)
- [conductor-oss conductor server-side request forgery in AgentController](https://junglewise.ai/threats/cve-2026-109404-a-vulnerability-was-identified-in-conductor-oss-conductor-up-to)
- [conductor-oss conductor server-side request forgery in Agent Card Fetching](https://junglewise.ai/threats/cve-2026-109403-a-vulnerability-was-determined-in-conductor-oss-conductor-up-to)
- [conductor-oss conductor server-side request forgery in MCP Service](https://junglewise.ai/threats/cve-2026-109402-a-vulnerability-was-found-in-conductor-oss-conductor-3-22-0)