A critical path traversal vulnerability in Qwen-Agent enables unauthenticated attackers to read sensitive files from the host server, posing a significant risk of data exfiltration.

The document parser fails to properly sanitize user-supplied file paths, allowing an unauthenticated attacker to bypass directory restrictions and access arbitrary files on the underlying filesystem via the Gradio interface.

Successful exploitation allows unauthorized actors to read sensitive system files, configuration files, or credentials accessible to the server process, potentially leading to a full system compromise. Given the CVSS score of 7.5, this high-severity vulnerability represents a significant risk to the confidentiality of the environment. The ability for an unauthenticated remote attacker to access arbitrary files necessitates immediate attention to prevent data theft and further lateral movement.

Immediate Action: Since a specific patch is currently unknown, administrators should restrict access to the Gradio interface using network-level controls (such as VPNs or IP whitelisting) and disable the document parsing functionality if it is not strictly required for business operations.

Proactive Monitoring: Monitor server access logs and web application traffic for suspicious file path patterns, such as the use of ".." sequences or references to sensitive system files like "/etc/passwd".

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block path traversal attempts targeting the Gradio endpoint.

Public Exploit Available: No

Given the high-severity nature of this arbitrary file read vulnerability, it is imperative that organizations running Qwen-Agent take immediate steps to isolate the affected interface. Users should monitor the official Qwen-Agent repository for security updates and apply them as soon as they become available to permanently remediate the underlying code defect.