CVE-2026-6129

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-6129

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6129.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-6129

Published

2026-04-12T19:45:12Z

Modified

2026-08-12T03:51:37Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication

Details

A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the component Agent Mode Service. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-287",
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6129.json"
}

References

Affected packages

Git / github.com/zhayujie/CowAgent

Affected ranges

Type

GIT

Repo

https://github.com/zhayujie/CowAgent

Events

Introduced

ce63de3c58910ce637577733c1a673e4e0ec55cb

Last Affected

5958b69ec93c8ffc0bab9b18d25133aee0b6b403

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "2.0.1"
        },
        {
            "last_affected": "2.0.1"
        },
        {
            "introduced": "2.0.2"
        },
        {
            "last_affected": "2.0.2"
        },
        {
            "introduced": "2.0.3"
        },
        {
            "last_affected": "2.0.3"
        },
        {
            "introduced": "2.0.4"
        },
        {
            "last_affected": "2.0.4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2.*

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6129.json"