CVE-2026-84887: Denial of Service in simular-ai Agent-S

This vulnerability in simular-ai Agent-S up to version 0.3.2 involves a denial of service condition triggered by manipulating an unspecified functionality in the grounding.py file of the Model-generated GUI Action Execution Workflow component. The flaw allows remote attackers to cause service disruption without requiring user interaction or elevated privileges. Although the vendor was notified early, no fix or advisory has been issued. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation results in denial of service, disrupting the availability of the affected component. The attack can be performed remotely without authentication or user interaction, potentially impacting systems running vulnerable versions. There is no indication of privilege escalation or data compromise from the provided information.

No official patch or remediation is currently available, and the vendor has not responded to disclosure. Users should consider restricting network access to the vulnerable component and monitor for exploit attempts. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.