PT-2026-57055 · Zhayujie · Cowagent

Eric-X · Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-15329

NVD

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool. do navigate of the file agent/tools/browser/browser tool.py of the component Browser Tool. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Correção

Improper Access Control

Information Disclosure

Enumeração de Fraquezas

CWE-284

CWE-200

Identificadores relacionados

CVE-2026-15329

Produtos afetados

Cowagent

Referências · 8

• 🔥 https://github.com/zhayujie/CowAgent/issues/2871 · Exploit
• https://github.com/zhayujie/CowAgent/issues/2871#issuecomment-4922534422 · Nota
• https://vuldb.com/submit/853098 · Nota
• https://vuldb.com/vuln/377272/cti · Nota
• https://vuldb.com/vuln/377272 · Nota
• https://github.com/zhayujie/CowAgent · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15329 · Nota de Segurança
• https://vuldb.com/cve/CVE-2026-15329 · Nota