CVE-2026-18992Proof of concept (PoC) published · CISA
zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization
CVSS score
5.3
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
5.3
CVE-2026-84427
zhayujie CowAgent Bash Tool bash.py denial of service
Z
Patch status unknownEPSS %0
5.3
CVE-2026-84425
zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108769
zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108768
zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108681
zhayujie CowAgent Web Console web_channel.py denial of service
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108682
zhayujie CowAgent Web Console upload read denial of service
Z
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-18992"