CVE-2026-18992

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. The Markdown Rendering component, file Markdown.tsx, is affected. The manipulation results in denial of service. The attack can be launched remotely and the exploit is public.

A vulnerability was identified in zhayujie CowAgent up to 2.2.0 in the json.loads function of the Streaming Tool-Call Argument Handler. Manipulation leads to resource allocation issues. The attack can be initiated remotely and the exploit is publicly available.

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9 in an unknown function of the Media Download Handler component. Manipulation leads to uncontrolled memory allocation, and the attack can be launched remotely. The exploit has been disclosed publicly and may be used; upgrading to version 2.2.0 resolves the issue (patch b7967210268fc4c0afea1078223e74e7e96a8a54).

A weakness has been identified in zhayujie CowAgent up to 2.1.6 in the read function of the /upload file of the Web Console component. Manipulation causes denial of service, and the attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks; the vendor was contacted but did not respond.

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py of the component Web Console. The manipulation of the argument session_id results in denial of service. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Version 2.1.7 (commit dec28324) only partly mitigates via a 512MB body cap.

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browser_tool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

A server-side request forgery (SSRF) vulnerability was found in zhayujie CowAgent up to version 2.1.1 in the WebFetch.execute function of agent/tools/web_fetch/web_fetch.py. The attack can be performed remotely by manipulating the url argument, and the exploit has been publicly disclosed.

A security flaw in zhayujie CowAgent up to 2.1.0 exists in channel/channel.py of the Message Endpoint component. Missing authorization in an unknown function allows remote unauthenticated attacks. The exploit is public and may be used in attacks.

A path traversal vulnerability was found in zhayujie CowAgent up to version 2.1.0 in the _add_url/_add_package function of agent/skills/service.py. Manipulation of the Name argument allows remote attack.