CVE-2026-108768 Details

A denial-of-service vulnerability has been identified in zhayujie CowAgent versions through 2.2.0. The issue arises in the Streaming Tool-Call Argument Handler, where the function json.loads() is used to process tool arguments streamed from models. There is no limit on the size of the argument strings before they are parsed, allowing a model provider to send excessively large arguments. This unbounded accumulation of data can lead to increased memory usage and CPU consumption, disrupting the application's performance and availability.

It is recommended to implement a hard limit on the size of tool-call arguments before they are accumulated, parsed, or repaired. This limit should be enforced during the streaming process to prevent excessive resource consumption. Additionally, the same limit should be applied in model provider adapters that handle tool arguments.