CVE-2026-15329

Publié : 10 juillet 2026

Modifié : 10 juillet 2026

Score CVSS

4.3

MEDIUM

Description détaillée

A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of the file agent/tools/browser/browser_tool.py of the component Browser Tool. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Références et Patchs

https://github.com/zhayujie/CowAgent/https://github.com/zhayujie/CowAgent/issues/2871 https://github.com/zhayujie/CowAgent/issues/2871#issuecomment-4922534422 https://vuldb.com/cve/CVE-2026-15329 https://vuldb.com/submit/853098 https://vuldb.com/vuln/377272 https://vuldb.com/vuln/377272/cti

Dernières Vulnérabilités

CVE-2026-21057

Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.

VOIR DÉTAILS

CVE-2026-21056

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

VOIR DÉTAILS

CVE-2026-21055

Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.

VOIR DÉTAILS