CVE-2026-15329: zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure
A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool.donavigate of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15329?
The severity of CVE-2026-15329 is rated as medium with a score of 4.3.
What type of vulnerability is CVE-2026-15329?
CVE-2026-15329 is classified as an information disclosure vulnerability.
How does CVE-2026-15329 affect zhayujie CowAgent?
This vulnerability affects the BrowserTool._do_navigate function in the browser_tool.py file within the zhayujie CowAgent software.
Can CVE-2026-15329 be exploited remotely?
Yes, CVE-2026-15329 can be exploited remotely to disclose information.
Is there a known fix for CVE-2026-15329?
As of now, there are no specific fixes provided for CVE-2026-15329; users are advised to monitor for updates from zhayujie.