| 标题 | zhayujie CowAgent 2.1.6 Denial of Service |
|---|
| 描述 | CowAgent has a high-impact denial of service vulnerability in the Web Console /upload endpoint.
The general upload path reads uploaded files completely into memory with unbounded read() calls before writing them to disk. It does not enforce a single-file size limit, directory file-count limit, or total upload-size limit.
An attacker who can access the Web Console can upload oversized files or directories with many files to rapidly consume process memory, fill disk storage, create excessive filesystem work, degrade service responsiveness, and potentially make CowAgent unavailable. Uploaded files may also amplify later Agent parsing and model/API cost.
Verified on CowAgent commit 61206ba73479db054921594a57b7df1c82694d29 / Desktop version 2.1.6. A safe PoC showed a 12 MiB file and a 120-file directory were accepted, with file reads performed through unbounded read() calls. |
|---|
| 来源 | ⚠️ https://github.com/hackerguopeng/cve/tree/main/CowAgent_Web_Upload_File_Directory_DoS_Report |
|---|
| 用户 | hackerguopeng (UID 99623) |
|---|
| 提交 | 2026-09-03 11時25分 (1 月前) |
|---|
| 管理 | 2026-10-10 23時22分 (1 month later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 416390 [zhayujie CowAgent 直到 2.1.6 Web Console /upload read 拒绝服务] |
|---|
| 积分 | 20 |
|---|