zhayujie

Products

ProductCVEsExploitedLatest
CowAgent13–Oct 11, 2026
chatgpt-on-wechat CowAgent5–Jul 14, 2026
chatgpt-on-wechat1–Jun 1, 2026

Exploited and recent CVEs

  • CVE-2026-108769 Medium 4.3 zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service 0.3%
  • CVE-2026-108768 Medium 4.3 zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources 0.3%
  • CVE-2026-108683 Medium 4.3 zhayujie CowAgent Media Download memory allocation 0.3%
  • CVE-2026-108682 Medium 5.4 zhayujie CowAgent Web Console upload read denial of service 0.2%
  • CVE-2026-108681 Medium 4.3 zhayujie CowAgent Web Console web_channel.py denial of service 0.3%
  • CVE-2026-84427 Medium 4.3 zhayujie CowAgent Bash Tool bash.py denial of service 0.5%
  • CVE-2026-84425 Medium 4.3 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service 0.5%
  • CVE-2026-18992 Medium 6.3 zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization 0.4%
  • CVE-2026-16194 Medium 6.3 zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery 0.5%
  • CVE-2026-15628 Medium 6.3 zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery 0.4%
  • CVE-2026-15332 Medium 6.3 zhayujie CowAgent Message Endpoint channel.py authorization 0.4%
  • CVE-2026-15331 Medium 5.4 zhayujie CowAgent Skill Installation service.py _add_package path traversal 0.4%
  • CVE-2026-15330 High 7.3 zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery 0.6%
  • CVE-2026-15329 Medium 4.3 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure 0.4%
  • CVE-2026-14714 Medium 6.5 zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication 0.8%
  • CVE-2026-10214 High 7.3 zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection 1.5%
  • CVE-2026-6129 High 7.3 zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication 0.4%
  • CVE-2026-6126 High 7.3 zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication 0.4%
  • CVE-2026-5998 Medium 5.3 zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal 0.6%