| शीर्षक | zhayujie CowAgent 2.1.3 Denial of Service |
|---|
| विवरण | CowAgent 2.1.3 has a denial of service vulnerability in the built-in Bash tool workflow.
The Bash tool can be invoked through normal agent tool-calling. When a command produces stdout or stderr, CowAgent buffers the complete output in memory and only applies truncation after the command finishes.
An attacker who can influence an agent task through prompt injection can cause the agent to call the Bash tool with a command that emits large output. This can exhaust process memory, cause the CowAgent WebApp or agent process to be OOM-killed, and make normal requests unavailable. |
|---|
| स्रोत | ⚠️ https://github.com/outlookgp/CVE/tree/main/CowAgent_Bash_Output_Buffer_DoS_Report |
|---|
| उपयोगकर्ता | outlookgp (UID 99658) |
|---|
| सबमिशन | 09/07/2026 01:51 PM (2 महीनों पहले) |
|---|
| संयम | 01/09/2026 08:15 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397793 [zhayujie CowAgent तक 2.1.7 Bash Tool agent/tools/bash/bash.py सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|