EUVD-2026-42783
GHSA-xgqv-jcxf-qp28
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable but requires authenticated access (PR:L); impact limited strictly to low confidentiality disclosure with no integrity, availability, or scope-change impact.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of the file agent/tools/browser/browser_tool.py of the component Browser Tool. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Information disclosure in zhayujie CowAgent up to version 2.1.0 exposes sensitive data to low-privileged authenticated remote attackers through the BrowserTool._do_navigate function in the Browser Tool component. Publicly available proof-of-concept exploit code exists via a GitHub issue report, though no patch has been released as the project maintainer has not yet responded to responsible disclosure. The CVSS 4.0 score of 2.1 and impact limited to low confidentiality exposure place this at the lower end of priority, tempered by the authentication requirement and niche product footprint.
Technical ContextAI
CowAgent is an AI agent framework developed by zhayujie (CPE: cpe:2.3:a:zhayujie:cowagent:*:*:*:*:*:*:*:*) that includes a Browser Tool component enabling automated web navigation within agent workflows. The affected function BrowserTool._do_navigate resides in agent/tools/browser/browser_tool.py and handles navigation logic during browser-driven agent tasks. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) identifies the root cause class - the function improperly exposes internal state, navigation targets, session data, or response content to callers who lack authorization to access it. All versions up to and including 2.1.0 are affected.
RemediationAI
No vendor-released patch has been identified at time of analysis; the project maintainer has not responded to the issue report filed at https://github.com/zhayujie/CowAgent/issues/2871. The most effective interim control is disabling or removing the Browser Tool component (agent/tools/browser/browser_tool.py) entirely if browser navigation functionality is not required by the deployment - this eliminates the attack surface with no other feature impact. If the Browser Tool is operationally necessary, restrict access to the CowAgent instance to the minimum set of trusted authenticated users, reducing the pool of potential abusers; note this does not eliminate the vulnerability but limits exposure. Organizations should monitor the project repository at https://github.com/zhayujie/CowAgent/ for a patched release, and may consider directly patching _do_navigate based on details in the public issue if an upstream fix does not materialize promptly.
Server-side request forgery in zhayujie CowAgent up to version 2.1.1 allows low-privileged authenticated users to direct
Denial of service in zhayujie CowAgent up to version 2.1.7 allows a low-privileged remote attacker to crash or degrade a
Incorrect authorization in zhayujie CowAgent up to version 2.1.1 allows low-privilege authenticated remote attackers to
Denial of service in zhayujie CowAgent up to version 2.1.3 allows a low-privileged remote attacker to crash or hang the
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today