Description

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "4.3",
  "pubDate": "2026-10-11T22:16:50.617Z",
  "pubdate": "2026-10-11T22:16:50.617Z",
  "executiveSummary": "A denial of service (DoS) vulnerability has been identified in the Markdown rendering component of zhayujie CowAgent, affecting all versions up to and including 2.2.0.\nThe vulnerability resides within Markdown.tsx and allows remote, unauthenticated attackers to disrupt service availability by manipulating processed input.\nThis flaw is categorized as a denial of service vulnerability, potentially stemming from resource exhaustion or infinite loop triggers during the parsing of malicious Markdown content.\nThe vulnerability is currently exploited in the wild, with public proof-of-concept code available, increasing the risk of active exploitation.\nThe vendor has not responded to initial vulnerability disclosures, and no patch is currently available to mitigate the issue at the source level.\nOrganizations using CowAgent are at risk of service outages if they expose the Markdown rendering functionality to untrusted user input.",
  "technicalDetails": "The vulnerability is located within the Markdown.tsx file of the CowAgent Markdown rendering component, which is responsible for parsing and transforming Markdown-formatted strings into displayable web content.\nThe root cause appears to be improper handling of specific Markdown syntax or malformed input sequences that induce excessive resource consumption—likely CPU or memory exhaustion—during the rendering process.\nBecause the component fails to implement adequate input validation or resource limiting, an attacker can craft a specially formatted payload that forces the rendering engine into a state of computational complexity, such as an ReDoS (Regular Expression Denial of Service) condition or an uncontrolled recursive loop.\nThe attack flow involves the delivery of the malicious Markdown payload to any endpoint that invokes the CowAgent renderer. As the application attempts to process the input, the rendering thread becomes blocked or consumes disproportionate system resources.\nSince the component is exposed via the web interface and does not require authentication to access the rendering logic, remote unauthenticated attackers can trigger the flaw repeatedly to keep the service unavailable.\nThis exploitation does not require advanced privileges or internal network access; it can be performed remotely over standard network protocols.\nUpon successful exploitation, the immediate impact is a total or partial service disruption (denial of service), as the underlying Node.js or web server process may become unresponsive, crash due to heap overflow, or experience severe latency, effectively denying access to legitimate users.\nGiven that the exploit is public, the attack vector is trivial for malicious actors to replicate, making immediate architectural isolation or filtering of inputs a necessity for impacted deployments."
}