Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18992

Опубликовано: 06 авг. 2026
Источник: nvd
CVSS3: 6.3
CVSS2: 6.5
EPSS Низкий

Описание

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carried out remotely. The exploit is now public and may be used.

EPSS

Процентиль: 11%
0.00209
Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 6.3
github
13 дней назад

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carried out remotely. The exploit is now public and may be used.

EPSS

Процентиль: 11%
0.00209
Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-285