CVE-2026-108768: zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
zhayujie CowAgent versions up to and including 2.2.0 are affected, specifically the Streaming Tool-Call Argument Handler's use of json.loads.
Can this be exploited remotely, and does an attacker need prior access?
The issue can be initiated remotely. The provided data does not state what level of access or authentication, if any, is required.
What is the practical impact of successful exploitation?
Manipulating the affected handler can cause resource allocation, with availability impact rated as low. The supplied severity vector indicates no confidentiality or integrity impact.
Is public exploit code available?
Yes. The exploit is publicly available and may be used.
Is a vendor fix or response available?
No vendor response is reported. The vendor was contacted early about the disclosure but did not respond, and no remediation or workaround is provided in the available data.