Threat · curated 1 Sep 2026

CVE-2026-82268 – Server-Side Request Forgery (SSRF) – Qwen-Agent ≤ 0.0.34

First reported today ionix.io

Coverage timeline

Single-source advisory — first reported, latest, and curated coincide.

Why it matters

CVE-2026-82268 lets unauthenticated attackers turn a widely deployed LLM agent framework into an SSRF pivot to reach cloud metadata services and internal networks, and no fixed release exists yet.

CVE-2026-82268 is a Server-Side Request Forgery vulnerability in Qwen-Agent (versions through 0.0.34), an open-source agent framework built on the Qwen LLM family. The document parsing logic in qwen_agent/tools/simple_doc_parser.py treats caller-supplied paths as URLs without scheme restriction or host validation, letting unauthenticated remote attackers coerce the server into requesting arbitrary internal/external addresses — including cloud metadata endpoints — via the default, exposed Gradio interface. It carries a CVSS v4.0 score of 8.7 (High) with no vendor patch yet available.