Skip to contentZhayujie Cowagent vulnerabilities
- zhayujie cowagentzhayujie CowAgent Markdown Rendering Markdown.tsx denial of serviceCVE-2026-1087695.3 Medium
- zhayujie cowagentzhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resourcesCVE-2026-1087685.3 Medium
- zhayujie cowagentzhayujie CowAgent Media Download memory allocationCVE-2026-1086835.3 Medium
- zhayujie cowagentzhayujie CowAgent Web Console upload read denial of serviceCVE-2026-1086825.3 Medium
- zhayujie cowagentzhayujie CowAgent Web Console web_channel.py denial of serviceCVE-2026-1086815.3 Medium
- zhayujie cowagentzhayujie CowAgent Bash Tool bash.py denial of serviceCVE-2026-844275.3 Medium
- zhayujie cowagentzhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of serviceCVE-2026-844255.3 Medium
- zhayujie cowagentzhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorizationCVE-2026-189925.3 Medium
- zhayujie cowagentzhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgeryCVE-2026-161945.3 Medium
- zhayujie chatgpt-on-wechat cowagentzhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgeryCVE-2026-156285.3 Medium
- zhayujie cowagentzhayujie CowAgent Message Endpoint channel.py authorizationCVE-2026-153325.3 Medium
- zhayujie cowagentzhayujie CowAgent Skill Installation service.py _add_package path traversalCVE-2026-153315.3 Medium
- zhayujie cowagentzhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgeryCVE-2026-153306.9 Medium
- zhayujie cowagentzhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosureCVE-2026-153295.3 Medium
- zhayujie chatgpt-on-wechat cowagentzhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authenticationCVE-2026-147146.9 Medium
- zhayujie chatgpt-on-wechat cowagentzhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authenticationCVE-2026-61296.9 Medium
- zhayujie chatgpt-on-wechat cowagentzhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authenticationCVE-2026-61266.9 Medium
- zhayujie chatgpt-on-wechat cowagentzhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversalCVE-2026-59986.9 Medium