Product by Zhayujie
CowAgent
13 known vulnerabilities in CowAgent (Zhayujie), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-15330 | zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery | 7.3 | |
| Medium | CVE-2026-16194 | zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery | 6.3 | |
| Medium | CVE-2026-84427 | zhayujie CowAgent Bash Tool bash.py denial of service | 4.3 | |
| Medium | CVE-2026-84425 | zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service | 4.3 | |
| Medium | CVE-2026-18992 | zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization | 6.3 | |
| Medium | CVE-2026-108683 | zhayujie CowAgent Media Download memory allocation | 4.3 | |
| Medium | CVE-2026-108768 | zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources | 4.3 | |
| Medium | CVE-2026-108769 | zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service | 4.3 | |
| Medium | CVE-2026-108681 | zhayujie CowAgent Web Console web_channel.py denial of service | 4.3 | |
| Medium | CVE-2026-15331 | zhayujie CowAgent Skill Installation service.py _add_package path traversal | 5.4 | |
| Medium | CVE-2026-15332 | zhayujie CowAgent Message Endpoint channel.py authorization | 6.3 | |
| Medium | CVE-2026-108682 | zhayujie CowAgent Web Console upload read denial of service | 5.4 | |
| Medium | CVE-2026-15329 | zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure | 4.3 |