---
id: CVE-2026-82275
title: >-
  Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the
  document parser that fails to restrict file access to intended directories
summary: >-
  Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the
  document parser that fails to restrict file access to intended directories.
  Attackers can supply absolute file paths to the unauthenticated Gradio
  interface to read…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
published: '2026-08-28'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T17:17:43.720'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82275'
references:
  - url: 'https://github.com/QwenLM/Qwen-Agent'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/QwenLM/Qwen-Agent/blob/31a4d36d123688581a9e9744427272b33ce940e0/qwen_agent/tools/simple_doc_parser.py
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/QwenLM/Qwen-Agent/blob/31a4d36d123688581a9e9744427272b33ce940e0/qwen_agent/utils/utils.py
    label: disclosure@vulncheck.com
  - url: 'https://github.com/QwenLM/Qwen-Agent/issues/912'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/qwen-agent-arbitrary-file-read-via-caller-supplied-document-path
    label: disclosure@vulncheck.com
  - url: 'https://github.com/QwenLM/Qwen-Agent/issues/912'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00459
epssPercentile: 0.37059
ingestedAt: '2026-09-23T17:28:14.814Z'
vendor: QwenLM
product: qwen-agent
affected:
  - qwen-agent <= 0.0.34
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-08-31T18:45:43.628116Z'
---

## Overview

Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.