All 6 CVE vulnerabilities found in CowAgent, with AI-generated Chinese analysis, references, and POCs.
Vendor: zhayujie
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-18992 | zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization CWE-863 | 6.3 | Medium | 2026-08-06 |
| CVE-2026-16194 | zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery CWE-918 | 6.3 | Medium | 2026-07-18 |
| CVE-2026-15332 | zhayujie CowAgent Message Endpoint channel.py authorization CWE-862 | 6.3 | Medium | 2026-07-10 |
| CVE-2026-15331 | zhayujie CowAgent Skill Installation service.py _add_package path traversal CWE-22 | 5.4 | Medium | 2026-07-10 |
| CVE-2026-15330 | zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery CWE-918 | 7.3 | High | 2026-07-10 |
| CVE-2026-15329 | zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure CWE-200 | 4.3 | Medium | 2026-07-10 |
All 6 known CVE vulnerabilities affecting CowAgent with full Chinese analysis, references, and POCs where available.