| Título | zhayujie CowAgent 2.1.6 Denial of Service |
|---|
| Descrição | CowAgent has a medium-impact denial of service vulnerability in ordinary streaming answer Markdown rendering.
Reasoning content has a 4 KB render protection, but normal assistant answer content does not have a comparable main-content render cap. In the Web Console, each streamed delta is appended to accumulatedText and then the full accumulated Markdown is rendered again. In the desktop client, each delta updates message.content and the Markdown component reparses the full content whenever it changes.
A prompt-influenced model or model gateway can return a large Markdown answer, long code block, or large table during normal chat streaming. This causes repeated Markdown parsing, syntax highlighting, DOM replacement, and layout work, which can freeze or crash the Web Console or desktop UI.
Verified on commit 61206ba73479db054921594a57b7df1c82694d29 / desktop version 2.1.6 with a safe local PoC. The PoC showed a 327750-character final answer caused 26716390 characters of cumulative Markdown parse input, about 81.5x amplification. |
|---|
| Fonte | ⚠️ https://github.com/outlookgp/CVE/tree/main/CowAgent_Markdown_Stream_Render_DoS_Report |
|---|
| Utilizador | outlookgp (UID 99658) |
|---|
| Submissão | 03/09/2026 12h27 (há 2 meses) |
|---|
| Moderação | 11/10/2026 09h20 (1 month later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 416551 [zhayujie CowAgent até 2.2.0 Markdown Rendering Markdown.tsx Negação de Serviço] |
|---|
| Pontos | 20 |
|---|