Vendor

    Zhayujie

    19 known vulnerabilities in products by Zhayujie, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zhayujie
    HighCVE-2026-10214

    zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection

    		7.3
    MediumCVE-2026-14714

    zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication

    		6.5
    HighCVE-2026-15330

    zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery

    		7.3
    MediumCVE-2026-16194

    zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery

    		6.3
    MediumCVE-2026-84427

    zhayujie CowAgent Bash Tool bash.py denial of service

    		4.3
    MediumCVE-2026-84425

    zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

    		4.3
    MediumCVE-2026-5998

    zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal

    		5.3
    HighCVE-2026-6126

    zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication

    		7.3
    HighCVE-2026-6129

    zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication

    		7.3
    MediumCVE-2026-18992

    zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization

    		6.3
    MediumCVE-2026-108683

    zhayujie CowAgent Media Download memory allocation

    		4.3
    MediumCVE-2026-15628

    Zhayujie chatgpt-on-wechat CowAgent: Server-Side Request Forgery (SSRF)

    		6.3
    MediumCVE-2026-108769

    zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service

    		4.3
    MediumCVE-2026-108768

    zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources

    		4.3
    MediumCVE-2026-108681

    zhayujie CowAgent Web Console web_channel.py denial of service

    		4.3
    MediumCVE-2026-15331

    zhayujie CowAgent Skill Installation service.py _add_package path traversal

    		5.4
    MediumCVE-2026-15332

    zhayujie CowAgent Message Endpoint channel.py authorization

    		6.3
    MediumCVE-2026-108682

    zhayujie CowAgent Web Console upload read denial of service

    		5.4
    MediumCVE-2026-15329

    zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure

    		4.3

    Products

    Products by Zhayujie
    CowAgent130
    Chatgpt-on-wechat Cowagent50