---
id: CVE-2026-108769
title: A security flaw has been discovered in zhayujie CowAgent up to 2.2.0
summary: >-
  A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This
  affects an unknown part of the file Markdown.tsx of the component Markdown
  Rendering. The manipulation results in denial of service. It is possible to
  launch the …
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-404
published: '2026-10-11'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T22:16:50.617'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-108769'
references:
  - url: >-
      https://github.com/outlookgp/CVE/tree/main/CowAgent_Markdown_Stream_Render_DoS_Report
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-108769'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/958041'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416551'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416551/cti'
    label: cna@vuldb.com
tags:
  - nvd
ingestedAt: '2026-10-12T14:50:34.070Z'
---

## Overview

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.