CVE-2026-108683

MEDIUM 4.3

zhayujie CowAgent Media Download memory allocation

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 is sufficient to resolve this issue. The name of the patch is b7967210268fc4c0afea1078223e74e7e96a8a54. You should upgrade the affected component.

CWE	CWE-789 CWE-400
Vendor	zhayujie
Product	cowagent
Published	Oct 11, 2026

Stay Ahead of the Next One

Get instant alerts for zhayujie cowagent

Be the first to know when new medium vulnerabilities affecting zhayujie cowagent are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

zhayujie / CowAgent

2.1.0 2.1.1 2.1.2 2.1.3 2.1.4 2.1.5 2.1.6 2.1.7 2.1.8 2.1.9

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/416391 vuldb.com: https://vuldb.com/vuln/416391/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108683 vuldb.com: https://vuldb.com/submit/958015 github.com: https://github.com/lche511/cve/tree/main/CowAgent_Channel_Media_Download_DoS_Report github.com: https://github.com/zhayujie/CowAgent/commit/b7967210268fc4c0afea1078223e74e7e96a8a54 github.com: https://github.com/zhayujie/CowAgent/releases/tag/2.2.0 github.com: https://github.com/zhayujie/CowAgent/

Credits

🔍 pengguogood (VulDB User)