CVE-2026-84425: fallo de gravedad media en zhayujie CowAgent
zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.5%
A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browser_tool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
zhayujie · CowAgentPoCs públicas encontradas — 1
cve_referencegithub.com/hackerguopeng/cve/tree/main/CowAgent_Browser_Evaluate_Wait_DoS_Reportno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — zhayujie CowAgent
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-15330MEDIUMzhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgeryEPSS 0.6%CVE-2026-84427MEDIUMzhayujie CowAgent Bash Tool bash.py denial of serviceEPSS 0.5%CVE-2026-16194MEDIUMzhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgeryEPSS 0.5%CVE-2026-15331MEDIUMzhayujie CowAgent Skill Installation service.py _add_package path traversalEPSS 0.4%CVE-2026-15329MEDIUMzhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosureEPSS 0.4%CVE-2026-18992MEDIUMzhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorizationEPSS 0.4%