CVE-2026-82275: Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-09-23
Weakness: CWE-22

Description

Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.

Affected products

QwenLM Qwen-Agent: through 0.0.34

References

https://github.com/QwenLM/Qwen-Agent
https://github.com/QwenLM/Qwen-Agent/blob/31a4d36d123688581a9e9744427272b33ce940e0/qwen_agent/tools/simple_doc_parser.py
https://github.com/QwenLM/Qwen-Agent/blob/31a4d36d123688581a9e9744427272b33ce940e0/qwen_agent/utils/utils.py
https://github.com/QwenLM/Qwen-Agent/issues/912
https://www.vulncheck.com/advisories/qwen-agent-arbitrary-file-read-via-caller-supplied-document-path
https://github.com/QwenLM/Qwen-Agent/issues/912

Get alerted when CVE-2026-82275 or the next vulnerability affects your stack