| タイトル | zhayujie CowAgent 2.1.6 Denial of Service |
|---|
| 説明 | CowAgent has a high-impact denial of service vulnerability in the Web Console /message endpoint.
The endpoint reads and parses the full request body before any size check. Each accepted message also allocates request mappings, SSE stream state, an unbounded session Queue(), and starts a raw thread.
An attacker who can access the Web Console can send oversized bodies or many messages with unique session_id values to rapidly consume memory, create excessive threads, grow unbounded queues/SSE state, and make the CowAgent service unavailable. If the messages reach the Agent workflow, the attack can also amplify paid model/API usage.
Verified on CowAgent commit 61206ba73479db054921594a57b7df1c82694d29 / Desktop version 2.1.6. |
|---|
| ソース | ⚠️ https://github.com/hackerguopeng/cve/tree/main/CowAgent_Web_Message_Queue_Thread_SSE_DoS_Report |
|---|
| ユーザー | hackerguopeng (UID 99623) |
|---|
| 送信 | 2026年09月03日 10:18 (2 月 ago) |
|---|
| モデレーション | 2026年10月10日 23:22 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 416389 [zhayujie CowAgent 迄 2.1.7 Web Console web_channel.py session_id サービス拒否] |
|---|
| ポイント | 20 |
|---|