The vulnerability exists in Qwen-Agent up to version 0.0.34 and arises from insufficient validation of file paths in the document parser. An attacker can provide an absolute file path through the public Gradio interface, bypassing intended directory restrictions and causing the server process to read the requested file. The consequence is that the attacker gains read access to any file that the server process can read, which compromises confidentiality of sensitive configuration, credentials, or proprietary data. The underlying weakness is identified as CWE-22, path traversal.

QwenLM’s Qwen-Agent library, released through version 0.0.34, is affected. The issue is present in all builds that include the vulnerable simple_doc_parser module; later releases are presumed to have fixed the path validation logic.

The CVSS score of 8.7 indicates high severity. No EPSS data is available, so the current exploitation probability cannot be quantified, but the vulnerability is accessible via an unauthenticated web interface, implying that remote attackers can exploit it without credentials. The issue is not listed in CISA's KEV catalog, suggesting no publicly known exploits at the time of analysis. The likely attack pathway involves sending a specially crafted request to the Gradio endpoint with an absolute path, triggering the server to read and return the file contents.