Zhayujie vulnerabilities
We track 4 vulnerabilities in Zhayujie products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.
Latest Zhayujie vulnerabilities
- 7.3 High severity
CowAgent: Server-Side Request Forgery
A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function _build_image_content/_download_to_data_url of the file agent/tools/vision/vision.py of the component Vision Tool. Executing a manipulation of the argument image can lead
- 7.3 High severity
chatgpt-on-wechat: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to os command injection. The attack
- 7.3 High severity
chatgpt-on-wechat CowAgent: Improper Authentication
A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the component Agent Mode Service. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploi
- 7.3 High severity
chatgpt-on-wechat CowAgent: Improper Authentication
A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipulation causes missing authentication. It is possible to initiate the attack remot