| タイトル | zhayujie CowAgent 2.1.6 Denial of Service |
|---|
| 説明 | CowAgent has a high-impact denial of service vulnerability in the Web Console /upload endpoint.
The general upload path reads uploaded files completely into memory with unbounded read() calls before writing them to disk. It does not enforce a single-file size limit, directory file-count limit, or total upload-size limit.
An attacker who can access the Web Console can upload oversized files or directories with many files to rapidly consume process memory, fill disk storage, create excessive filesystem work, degrade service responsiveness, and potentially make CowAgent unavailable. Uploaded files may also amplify later Agent parsing and model/API cost.
Verified on CowAgent commit 61206ba73479db054921594a57b7df1c82694d29 / Desktop version 2.1.6. A safe PoC showed a 12 MiB file and a 120-file directory were accepted, with file reads performed through unbounded read() calls. |
|---|
| ソース | ⚠️ https://github.com/hackerguopeng/cve/tree/main/CowAgent_Web_Upload_File_Directory_DoS_Report |
|---|
| ユーザー | hackerguopeng (UID 99623) |
|---|
| 送信 | 2026年09月03日 11:25 (2 月 ago) |
|---|
| モデレーション | 2026年10月10日 23:22 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 416390 [zhayujie CowAgent 迄 2.1.6 Web Console /upload read サービス拒否] |
|---|
| ポイント | 20 |
|---|