CVE-2026-108683

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-108683

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108683.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-108683

Published

2026-10-11T14:30:23Z

Modified

2026-10-14T02:30:15Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

zhayujie CowAgent Media Download memory allocation

Details

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 is sufficient to resolve this issue. The name of the patch is b7967210268fc4c0afea1078223e74e7e96a8a54. You should upgrade the affected component.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-400",
        "CWE-789"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108683.json"
}

References

Affected packages

Git / github.com/zhayujie/cowagent

Affected ranges

Type

GIT

Repo

https://github.com/zhayujie/cowagent

Events

Introduced

feaa9076b0d5eb60cab5ada6aec20f09d4d774fb

Fixed

b7967210268fc4c0afea1078223e74e7e96a8a54

Fixed

c94f3bba903fa6f4e4b2330d7f8f27de1b1be7f5

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "2.1.0"
        },
        {
            "last_affected":  "2.1.0"
        },
        {
            "introduced":  "2.1.1"
        },
        {
            "last_affected":  "2.1.1"
        },
        {
            "introduced":  "2.1.2"
        },
        {
            "last_affected":  "2.1.2"
        },
        {
            "introduced":  "2.1.3"
        },
        {
            "last_affected":  "2.1.3"
        },
        {
            "introduced":  "2.1.4"
        },
        {
            "last_affected":  "2.1.4"
        },
        {
            "introduced":  "2.1.5"
        },
        {
            "last_affected":  "2.1.5"
        },
        {
            "introduced":  "2.1.6"
        },
        {
            "last_affected":  "2.1.6"
        },
        {
            "introduced":  "2.1.7"
        },
        {
            "last_affected":  "2.1.7"
        },
        {
            "introduced":  "2.1.8"
        },
        {
            "last_affected":  "2.1.8"
        },
        {
            "introduced":  "2.1.9"
        },
        {
            "last_affected":  "2.1.9"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.1.0

2.1.1

2.1.2

2.1.3

2.1.4

2.1.5

2.1.6

2.1.7

2.1.8

2.1.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108683.json"