An SSRF flaw exists in the A2AService.getAgentCard method of Conductor's Agent Card Fetching component. By manipulating the agentUrl argument, an attacker can force the Conductor server to make arbitrary HTTP requests to any target reachable from the server side. This can expose internal resources, facilitate credential dumping, or launch further attacks against internal services. The flaw targets integrity and availability of internal systems and can be exploited remotely without authentication.

Conductor Open Source Edition versions up to 3.32.5 are vulnerable. The issue arises in the ai module under org.conductoross.conductor.ai.a2a.A2AService. All deployments running these or earlier releases that expose the Agent Card service are affected.

The CVSS score of 6.9 indicates a medium severity vulnerability. The EPSS score is not available, but the exploit has been publicly disclosed and the attack can be launched remotely. The vulnerability is not listed in the CISA KEV catalog at this time. Based on the description, the attack vector is likely a remote SSRF request that requires sending a crafted agentUrl to the vulnerable endpoint. An attacker could use this to read or modify internal data through the Conductor server.