CVE-2026-82275

CVE-2026-82275 is a path traversal vulnerability (CWE-22) in the document parser of Qwen-Agent through version 0.0.34, which fails to restrict file access to the directories the parser is intended to operate in. Because the bundled Gradio interface is unauthenticated, any user who can reach it can supply an absolute file path and have the parser read a file outside the intended directory. An attacker gains arbitrary file read with the privileges of the server process, allowing theft of configuration files, secrets, or credentials; there is no integrity or availability impact (CVSS 4.0 8.7 High, confidentiality-only). Any deployment of Qwen-Agent 0.0.34 or earlier whose document-parsing or Gradio service is reachable by untrusted users, especially internet-exposed instances, is affected. No public proof-of-concept or in-the-wild exploitation is known; EPSS is 0.4% (31st percentile) and the flaw is not in CISA KEV.

What to do: Upgrade Qwen-Agent to a release newer than 0.0.34 as soon as a patched version is available; until then, avoid exposing the Gradio interface to untrusted networks by binding it to localhost or placing it behind authentication or a VPN. Enforce an allowed-directory whitelist for parsed paths and reject absolute paths, run the service with least-privilege filesystem access, and review server logs for requests containing absolute paths or traversal sequences as indicators of probing.