CVE-2026-84427 Details

A denial-of-service vulnerability has been identified in zhayujie CowAgent versions through 2.1.7. The issue resides in the Bash tool component, specifically within the file agent/tools/bash/bash.py. The vulnerability allows for excessive memory consumption and disk usage, leading to unavailability of the agent process. This can be exploited remotely by injecting a prompt that causes the agent to execute a Bash command generating large output. The vulnerability has been publicly disclosed.

It is recommended to disable the built-in Bash tool by default for untrusted users, implement a permission switch to control Bash tool injection, enforce server-side maximum timeouts for Bash commands, and add regression tests to ensure oversized output is properly handled.