CVE-2026-108769: Denial of Service in zhayujie CowAgent

A denial of service vulnerability has been identified in zhayujie CowAgent up to version 2.2.0. The issue resides in an unspecified part of the Markdown.tsx file within the Markdown Rendering component. Exploitation allows remote attackers to cause a denial of service condition. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The vendor was contacted but did not respond, and no official fix or patch is currently available. Public exploit code has been released, increasing the risk of attack.

Successful exploitation results in denial of service, potentially disrupting availability of the affected CowAgent software. The attack can be launched remotely without privileges or user interaction, increasing the attack surface. However, there is no indication of code execution or data compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor for official updates. Until a fix is released, consider limiting exposure of the affected service to untrusted networks to reduce risk.