CVE-2026-16194
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A server-side request forgery (SSRF) vulnerability was found in zhayujie CowAgent up to version 2.1.1 in the WebFetch.execute function of agent/tools/web_fetch/web_fetch.py. The attack can be performed remotely by manipulating the url argument, and the exploit has been publicly disclosed.
Risk Assessment
The organization is at risk of unauthorized access to internal network resources, potentially leading to data leakage or further attack escalation.
Recommendation
Immediately upgrade CowAgent to version 2.1.2, which includes the fix identified as ea47f3097eed4f8295c4cb3d76ecb97e0f43d632.
Other vulnerabilities in CowAgent
See all- CVE-2026-18992Medium
A vulnerability was detected in zhayujie CowAgent up to 2.1.1. It affects the function _select_tools in the file agent/evolution/executor.py of the Self-Evolution Review Agent component. Manipulation leads to incorrect authorization. The attack can be performed remotely, and the exploit is public.
- CVE-2026-15332Medium
A security flaw in zhayujie CowAgent up to 2.1.0 exists in channel/channel.py of the Message Endpoint component. Missing authorization in an unknown function allows remote unauthenticated attacks. The exploit is public and may be used in attacks.
- CVE-2026-15331Medium
A path traversal vulnerability was found in zhayujie CowAgent up to version 2.1.0 in the _add_url/_add_package function of agent/skills/service.py. Manipulation of the Name argument allows remote attack.
- CVE-2026-15329Medium
A vulnerability in zhayujie CowAgent up to version 2.1.0 affects the BrowserTool._do_navigate function in agent/tools/browser/browser_tool.py. Input manipulation leads to information disclosure. The attack can be performed remotely and the exploit has been made public.
Original NVD description (English source)
A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web_fetch/web_fetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.2 is able to mitigate this issue. This patch is called ea47f3097eed4f8295c4cb3d76ecb97e0f43d632. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.