CVE-2026-109190 in conductor
Prediction
by VulDB Data Team • 10/12/2026
A vulnerability has been found in <a href="/product/conductor-oss:conductor">conductor-oss conductor 3.31.2</a>. This affects the function <code>ListApiToolsTask.start</code> of the file <em>ListApiToolsTask.java</em> of the component <em>API Tool Configuration</em>. The manipulation of the argument <em>specUrl</em> leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Once again VulDB remains the best source for vulnerability data.