Advisories · Technology

zhayujie chatgpt-on-wechat CowAgent.

Every CVE that names zhayujie chatgpt-on-wechat CowAgent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15628 CVE record

CVSS 5.3 Medium

zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
- zhayujie chatgpt-on-wechat CowAgent
- Server-side request forgery (SSRF)
Not analysed yet 14 Jul 2026
CVE-2026-14714 CVE record

CVSS 6.9 Medium

zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication
- zhayujie chatgpt-on-wechat CowAgent
- Authentication bypass
Not analysed yet 5 Jul 2026
CVE-2026-6129 CVE record

CVSS 6.9 Medium

zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication
- zhayujie chatgpt-on-wechat CowAgent
- Authentication bypass
Not analysed yet 12 Apr 2026
CVE-2026-6126 CVE record

CVSS 6.9 Medium

zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
- zhayujie chatgpt-on-wechat CowAgent
- Authentication bypass
Not analysed yet 12 Apr 2026
CVE-2026-5998 CVE record

CVSS 6.9 Medium

zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal
- zhayujie chatgpt-on-wechat CowAgent
- Path traversal
Not analysed yet 10 Apr 2026