CVE-2026-84885: simular-ai Agent-S CodeAgent code_agent.py denial of service
A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file codeagent.py of the component CodeAgent. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be launched remotely, but the severity vector indicates that an attacker needs low-level privileges. No user interaction is required.
Which versions are identified as affected?
The affected versions listed are simular-ai Agent-S 0.3.1 and 0.3.2, specifically the CodeAgent component's code_agent.py file.
What is the expected impact if exploitation succeeds?
Successful exploitation can cause a denial of service. The provided severity vector indicates availability impact only, with no stated confidentiality or integrity impact.
Is exploitation theoretical?
No. A public exploit has been disclosed and may be used, and the exploit maturity is rated as proof-of-concept.
Is a vendor fix available?
The available information does not identify a fix. It states that the vendor was contacted early about the disclosure but did not respond.