A patch in the MCP Service of conductor allows the manipulation of the mcpServer argument to cause the service to send requests to arbitrary hosts. The flaw is a typical server‑side request forgery (SSRF), which can allow an attacker to reach internal network services or external sites that are otherwise unaccessible, potentially disclosing sensitive information or enabling further lateral movement. The vulnerability is encoded as CWE‑918 and has a CVSS score of 5.3, indicating a moderate severity. The description states that the exploit is publicly available and can be initiated remotely, which underscores that an attacker only needs to invoke the vulnerable endpoint to trigger the request.

The vulnerability affects the conductor‑oss conductor component, specifically version 3.22.0. Any installation of conductor deployed with this version of the MCP Service is vulnerable until it is upgraded or otherwise mitigated.

The CVSS score of 5.3 reflects the moderate impact, but the remote nature of the attack vector and public availability of the exploit raise the priority of applying a fix or otherwise isolating the vulnerable endpoint. While the fault does not immediately elevate confidentiality or integrity to a high level, the ability for an attacker to force the application to reach arbitrary hosts could be used to pivot into a larger enterprise environment. Given that the exploit is already known and publicly shared, organization should consider this flaw a medium‑to‑low priority in the context of other vulnerabilities, but with a quick patch response to prevent potential misuse.