CVE-2026-84885: Denial of Service in simular-ai Agent-S

This vulnerability in simular-ai Agent-S 0.3.1 and 0.3.2 involves an unknown function in the code_agent.py file of the CodeAgent component that can be manipulated remotely to cause a denial of service condition. The attack requires no user interaction and can be performed with low privileges. Although the exploit has been publicly disclosed, the vendor has not responded or provided a fix. The CVSS 4.0 base score is 5.3, reflecting medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation results in denial of service, potentially disrupting the availability of the simular-ai Agent-S application. The impact is limited to service interruption without indication of further compromise or data loss. The vulnerability can be triggered remotely, increasing the risk of exploitation in exposed environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider mitigating exposure by restricting network access to the affected versions of Agent-S (0.3.1 and 0.3.2) until a fix is released.