CVE-2026-15332
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A security flaw in zhayujie CowAgent up to 2.1.0 exists in channel/channel.py of the Message Endpoint component. Missing authorization in an unknown function allows remote unauthenticated attacks. The exploit is public and may be used in attacks.
Risk Assessment
The organization is at risk of remote system takeover or sensitive data access by unauthorized users. The vendor's lack of response increases the exploitation risk.
Recommendation
Immediately disable or isolate systems using CowAgent until a patch is released. Consider deploying temporary WAF rules to block suspicious requests to the message endpoint.
Other vulnerabilities in CowAgent
See all- CVE-2026-18992Medium
A vulnerability was detected in zhayujie CowAgent up to 2.1.1. It affects the function _select_tools in the file agent/evolution/executor.py of the Self-Evolution Review Agent component. Manipulation leads to incorrect authorization. The attack can be performed remotely, and the exploit is public.
- CVE-2026-16194Medium
A server-side request forgery (SSRF) vulnerability was found in zhayujie CowAgent up to version 2.1.1 in the WebFetch.execute function of agent/tools/web_fetch/web_fetch.py. The attack can be performed remotely by manipulating the url argument, and the exploit has been publicly disclosed.
- CVE-2026-15331Medium
A path traversal vulnerability was found in zhayujie CowAgent up to version 2.1.0 in the _add_url/_add_package function of agent/skills/service.py. Manipulation of the Name argument allows remote attack.
- CVE-2026-15329Medium
A vulnerability in zhayujie CowAgent up to version 2.1.0 affects the BrowserTool._do_navigate function in agent/tools/browser/browser_tool.py. Input manipulation leads to information disclosure. The attack can be performed remotely and the exploit has been made public.
Original NVD description (English source)
A security flaw has been discovered in zhayujie CowAgent up to 2.1.0. The impacted element is an unknown function of the file channel/channel.py of the component Message Endpoint. The manipulation results in missing authorization. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.