CVE-2026-108769 - zhayujie CowAgent Markdown Rendering Denial of Service
CVE-2026-108769 - zhayujie CowAgent Markdown Rendering Denial of Service
A security flaw has been discovered in zhayujie CowAgent up to version 2.2.0. This vulnerability affects an unknown part of the file Markdown.tsx within the component Markdown Rendering. The manipulation results in denial of service and can be executed remotely. 🚨
The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond.
Affected Products
The following products are affected by the CVE-2026-108769 vulnerability:
- Vendor: Zhayujie
- Product: CowAgent
Vulnerability Details
The CVE was first received on October 11, 2026, with a description noting the security flaw in zhayujie CowAgent up to version 2.2.0 affecting Markdown.tsx, resulting in denial of service via a remote attack. A public exploit exists for this vulnerability.
CVSS Scores
- CVSS V4.0: AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS V3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS V2: AV:N/AC:L/Au:S/C:N/I:N/A:P
References
For more information, you can check the following references:
To read the complete article, see: Read full article\n