Sunday, 13 September 2026
8 agent hacks today 7 vs yesterday (1)

Multiple DoS vulnerabilities in zhayujie CowAgent

Two denial of service vulnerabilities were discovered in zhayujie CowAgent affecting the Bash Tool and Browser Tool components. Both vulnerabilities can be exploited remotely and have been publicly disclosed.

Disclosed 2 September 2026 · Record updated 13 September 2026

Impact

Denial of service attacks possible on CowAgent instances via Bash Tool (up to 2.1.7) and Browser Tool (up to 2.1.3) components

Our coverage

No articles linked to this incident yet.

Sources

  1. github.comhttps://github.com/advisories/GHSA-wh78-4m24-7957
  2. github.comhttps://github.com/advisories/GHSA-33c2-g8hf-fxjf