VYPR

Cowagent

by Zhayujie

Source repositories

CVEs (2)

  • CVE-2026-6126HigApr 12, 2026
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit…

  • CVE-2026-10214HigJun 1, 2026
    risk 0.40cvss 7.3epss

    A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to os command injection. The attack can be launched…