CVE-2026-108681 | zhayujie CowAgent up to 2.1.7 Web Console web_channel.py session_id denial of service

October 10, 2026 Yanac

A vulnerability classified as problematic was found in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py of the component Web Console. The manipulation of the argument session_id results in denial of service.

This vulnerability was named CVE-2026-108681. The attack may be performed from remote. In addition, an exploit is available.

Version 2.1.7 (commit dec28324) only partly mitigates via a 512MB body cap. The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More