PT-2026-32158

CVE-2026-6126

·

Published

2026-04-12

·

Updated

2026-04-12

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions zahayujie chatgpt-on-wechat CowAgent version 2.0.4
Description A weakness exists in the Administrative HTTP Endpoint component of zhayujie chatgpt-on-wechat CowAgent version 2.0.4 due to missing authentication in an unknown function. This allows for remote attacks. The exploit is publicly available.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-306: Missing Authentication for Critical Function
CWE-287: Improper Authentication
Related identifiers
CVE-2026-6126
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com