| 제목 | zhayujie CowAgent 2.1.6 Denial of Service |
|---|
| 설명 | CowAgent has a medium-impact denial of service vulnerability in streaming tool-call argument handling.
When a model streams tool_calls[*].function.arguments, CowAgent appends every argument fragment into an in-memory string. Only after the full stream finishes does it call json.loads() and may fall back to json_repair. There is no hard size limit before accumulation, parsing, or JSON repair.
A malicious or compromised model provider, model gateway, OpenAI-compatible endpoint, or prompt-influenced model response can return oversized tool arguments. CowAgent will accumulate the full argument first, then spend memory and CPU parsing or repairing it, which can delay agent turns, degrade service responsiveness, or make the shared process unavailable.
Verified on commit 61206ba73479db054921594a57b7df1c82694d29 / desktop version 2.1.6 with a safe local PoC. |
|---|
| 원천 | ⚠️ https://github.com/lche511/cve/tree/main/CowAgent_Tool_Call_Arguments_JSON_Repair_DoS_Report |
|---|
| 사용자 | pengguogood (UID 72903) |
|---|
| 제출 | 2026. 09. 03. AM 11:57 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 10. 11. AM 09:20 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416550 [zhayujie CowAgent 까지 2.2.0 Streaming Tool-Call Argument json.loads 서비스 거부] |
|---|
| 포인트들 | 20 |
|---|