Threats tagged 'ghsa-wjcq-xp37-c947'

CVE-2026-18992 is a medium severity vulnerability in zhayujie CowAgent up to version 2.1.1 affecting the _select_tools function in the Self-Evolution Review Agent component. The flaw allows remote attackers to cause incorrect authorization, potentially leading to unauthorized actions. Public exploit code is available, but no known exploitation in the wild has been reported. No patch or remediation information is currently provided.