zhayujie

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

zhayujie records in CISA KEV

No zhayujie vulnerabilities are listed in CISA KEV.

Records

19 records

TI-2026-12902 CVE-2026-15330 · GHSA-2xj7-6vvg-p9hp

zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery

HIGH 70

A vulnerability was determined in zhayujie CowAgent up to 2.1.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00605 Published 2026-07-10 Fixed in 2.1.2 CWE-918

TI-2026-12400 CVE-2026-14714 · GHSA-wh4m-9grw-87fp

zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication

HIGH 70

A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00783 Published 2026-07-05 Fixed in 2.1.1 CWE-287

TI-2026-08952 CVE-2026-10214 · GHSA-qvrw-783g-pmvr

zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection

HIGH 70

A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0147 Published 2026-06-01 Fixed in 2.0.9 CWE-77

TI-2026-05370 CVE-2026-6126 · GHSA-8hj3-w5vf-j956

zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication

HIGH 70

A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00397 Published 2026-04-12 No fix listed CWE-287

TI-2026-05261 CVE-2026-5998 · GHSA-m63g-rhjw-f2v6

zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal

HIGH 70

A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00645 Published 2026-04-10 Fixed in 2.0.5 CWE-22

TI-2026-70803 CVE-2026-108769 · GHSA-3495-753p-x98c

Denial of service in zhayujie CowAgent Markdown rendering

MEDIUM 57

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00276 Published 2026-10-11 No fix listed CWE-404

TI-2026-70799 CVE-2026-108768 · GHSA-cmfc-4qwc-4894

Unlimited resource allocation in zhayujie CowAgent tool-call parsing

MEDIUM 57

A vulnerability was identified in zhayujie CowAgent up to 2.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00276 Published 2026-10-11 No fix listed CWE-400

TI-2026-70666 CVE-2026-108683 · GHSA-gvp9-cf4x-m67p

Uncontrolled memory allocation in zhayujie CowAgent media download

MEDIUM 57

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2026-10-11 Fixed in 2.2.0 CWE-400

TI-2026-70665 CVE-2026-108682 · GHSA-25fr-gwcc-7xv8

Resource leak in CowAgent Web Console upload enables denial of service

MEDIUM 57

A weakness has been identified in zhayujie CowAgent up to 2.1.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00241 Published 2026-10-11 No fix listed CWE-404

TI-2026-70664 CVE-2026-108681 · GHSA-9wr9-h75r-7xj4

Denial of service in zhayujie CowAgent Web Console

MEDIUM 57

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-10-11 No fix listed CWE-404

TI-2026-58021 CVE-2026-84427 · GHSA-wh78-4m24-7957

zhayujie CowAgent Bash Tool bash.py denial of service

MEDIUM 57

A vulnerability was determined in zhayujie CowAgent up to 2.1.7.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00471 Published 2026-09-02 No fix listed CWE-404

TI-2026-58020 CVE-2026-84425 · GHSA-33c2-g8hf-fxjf

zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

MEDIUM 57

A vulnerability was found in zhayujie CowAgent up to 2.1.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00471 Published 2026-09-02 No fix listed CWE-404

TI-2026-15519 CVE-2026-18992 · GHSA-wjcq-xp37-c947

zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization

MEDIUM 57

A vulnerability was detected in zhayujie CowAgent up to 2.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-285

TI-2026-13535 CVE-2026-16194 · GHSA-wcfc-xp4r-c7rv

zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery

MEDIUM 57

A vulnerability was determined in zhayujie CowAgent up to 2.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00465 Published 2026-07-18 Fixed in 2.1.2 CWE-918

TI-2026-13150 CVE-2026-15628 · GHSA-76cc-739m-wwpv

zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery

MEDIUM 57

A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00374 Published 2026-07-14 Fixed in 2.1.2 CWE-918

TI-2026-12904 CVE-2026-15332 · GHSA-w2xj-h2fq-hcfv

zhayujie CowAgent Message Endpoint channel.py authorization

MEDIUM 57

A security flaw has been discovered in zhayujie CowAgent up to 2.1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-07-10 No fix listed CWE-862

TI-2026-12903 CVE-2026-15331 · GHSA-c3mj-x5cv-cphr

zhayujie CowAgent Skill Installation service.py _add_package path traversal

MEDIUM 57

A vulnerability was identified in zhayujie CowAgent up to 2.1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00445 Published 2026-07-10 Fixed in 2.1.2 CWE-22

TI-2026-12901 CVE-2026-15329 · GHSA-xgqv-jcxf-qp28

zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate information disclosure

MEDIUM 57

A vulnerability was found in zhayujie CowAgent up to 2.1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00419 Published 2026-07-10 No fix listed CWE-200

TI-2026-05373 CVE-2026-6129 · GHSA-8r42-22r7-vfg2

zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication

LOW 31

A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00391 Published 2026-04-12 No fix listed CWE-287

Open these records in search →

Critical	0
High	0
Medium	19
Low	0
No CVSS	0