PT-2026-68376
CVE-2026-18992
·
Published
2026-08-06
·
Updated
2026-08-06
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
zhayujie CowAgent versions prior to 2.1.2
Description
An issue exists in the Self-Evolution Review Agent component within the
select tools() function of the agent/evolution/executor.py file. A remote attacker can perform a manipulation that leads to incorrect authorization.Recommendations
Update zhayujie CowAgent to version 2.1.2 or later.
As a temporary mitigation, restrict access to the
select tools() function in the agent/evolution/executor.py file.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾