PT-2026-57055 · Zhayujie · Cowagent

Eric-X · Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-15329

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool. do navigate of the file agent/tools/browser/browser tool.py of the component Browser Tool. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2026-15329

Affected Products

Cowagent

References · 8

• 🔥 https://github.com/zhayujie/CowAgent/issues/2871 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15329 · Security Note
• https://github.com/zhayujie/CowAgent/issues/2871#issuecomment-4922534422 · Note
• https://vuldb.com/submit/853098 · Note
• https://vuldb.com/vuln/377272/cti · Note
• https://vuldb.com/vuln/377272 · Note
• https://github.com/zhayujie/CowAgent · Note
• https://vuldb.com/cve/CVE-2026-15329 · Note