CowAgent vulnerabilities
CVEs whose affected-version data names the CowAgent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-108769Medium· 4.3PoCA security flaw has been discovered in zhayujie CowAgent up to 2.2.0
A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the …
CVE-2026-108768Medium· 4.3PoCA vulnerability was identified in zhayujie CowAgent up to 2.2.0
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible t…
CVE-2026-108683Medium· 4.3PoCA security vulnerability has been detected in zhayujie CowAgent up to 2.1.9
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible t…
CVE-2026-108682Medium· 5.4PoCA weakness has been identified in zhayujie CowAgent up to 2.1.6
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attac…
CVE-2026-108681Medium· 4.3PoCA security flaw has been discovered in zhayujie CowAgent up to 2.1.7
A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py of the component Web Console. The manipulation of the argument session_id results in denial of s…