Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process.

Qwen-Agent versions through 0.0.34 contain a path traversal vulnerability in the document parser component. The vulnerability fails to restrict file access to intended directories, allowing attackers to supply absolute file paths to read arbitrary files. The attack vector is the unauthenticated Gradio interface, making it exploitable without any authentication. Affected files include the simple_doc_parser.py and utils.py modules. An attacker can read any file accessible by the server process, posing significant data exfiltration risks. The vulnerability is tracked as CVE-2026-82275 and has been reported via GitHub issues and VulnCheck advisories.