CVE-2026-84425 Overview
CVE-2026-84425 is a denial of service vulnerability affecting zhayujie CowAgent versions up to 2.1.3. The flaw resides in the BrowserTool function within agent/tools/browser/browser_tool.py, part of the Browser Tool component. An attacker can manipulate the affected function remotely to trigger a denial of service condition. The exploit has been publicly disclosed, increasing the risk of opportunistic use. According to the reporter, the vendor was contacted before publication but did not respond. The issue is categorized under [CWE-404] (Improper Resource Shutdown or Release).
Critical Impact
A remote authenticated actor can disrupt CowAgent availability by abusing the browser evaluation and wait logic in the BrowserTool component.
Affected Products
- zhayujie CowAgent versions up to and including 2.1.3
- Component: Browser Tool (agent/tools/browser/browser_tool.py)
- Function: BrowserTool
Discovery Timeline
- 2026-09-02 - CVE-2026-84425 published to the National Vulnerability Database
- 2026-09-02 - Last updated in NVD database
Technical Details for CVE-2026-84425
Vulnerability Analysis
The vulnerability affects the BrowserTool function in agent/tools/browser/browser_tool.py. According to the public advisory, manipulation of inputs handled by this function causes a denial of service condition in CowAgent. The referenced report, titled "CowAgent_Browser_Evaluate_Wait_DoS_Report," indicates the flaw involves the browser evaluate and wait logic within the tool. Because CowAgent is an agent framework that automates browser actions, disrupting this tool can halt automation workflows that depend on it. The exploit requires network access and low-level privileges but no user interaction, according to the published CVSS 4.0 vector.
Root Cause
The underlying weakness maps to [CWE-404], Improper Resource Shutdown or Release. The BrowserTool implementation fails to properly manage browser evaluation waits or associated resources. When malformed or long-running input is provided, the tool does not release or bound the operation, exhausting availability. Public technical details for the exact code path are limited; readers should consult the GitHub CVE DoS Report for reproduction steps.
Attack Vector
Exploitation occurs over the network against a running CowAgent instance exposing the browser tool. The attacker submits crafted input that triggers the vulnerable evaluate/wait path in BrowserTool. No privileged access to the underlying host is required beyond the low-privilege access needed to invoke the agent tool. Successful exploitation degrades availability of the CowAgent service. See the VulDB entry for CVE-2026-84425 for additional context.
No verified proof-of-concept code is republished here. Refer to the GitHub CVE DoS Report for the reporter's technical write-up.
Detection Methods for CVE-2026-84425
Indicators of Compromise
- Repeated invocations of the CowAgent BrowserTool API from a single source that correlate with unresponsive agent workers.
- Long-running or hung browser evaluate/wait operations tied to the agent/tools/browser/browser_tool.py code path.
- Sudden growth in orphaned browser processes or headless browser instances on CowAgent hosts.
Detection Strategies
- Instrument the CowAgent process to log entry, exit, and duration for BrowserTool calls, and alert on operations exceeding a defined threshold.
- Monitor for HTTP or RPC requests to the CowAgent tool endpoint that lack matching completion events.
- Baseline CPU, memory, and file descriptor usage of CowAgent workers to identify resource exhaustion patterns consistent with [CWE-404].
Monitoring Recommendations
- Aggregate CowAgent application logs into a centralized analytics platform and build detections around browser tool timeout events.
- Track the ratio of successful to failed browser tool invocations per source identity and alert on anomalies.
- Watch for repeated agent restarts or supervisor kill events that indicate availability impact.
How to Mitigate CVE-2026-84425
Immediate Actions Required
- Restrict network exposure of CowAgent instances so only trusted callers can invoke the browser tool.
- Enforce authentication and per-identity rate limits on tool invocations to reduce abuse from a single low-privilege account.
- Review CowAgent deployments for versions up to 2.1.3 and isolate them until a vendor fix is available.
Patch Information
As of the NVD publication date (2026-09-02), no vendor patch has been referenced in the advisory. The VulDB entry for CVE-2026-84425 notes the vendor was contacted early but did not respond. Track the upstream zhayujie CowAgent repository for any subsequent release addressing the BrowserTool evaluate/wait logic and apply updates once available.
Workarounds
- Disable or remove the BrowserTool component in agent/tools/browser/browser_tool.py if browser automation is not required for your deployment.
- Wrap browser evaluate and wait calls with strict timeouts and terminate hung browser processes through a supervisor.
- Apply a reverse proxy in front of CowAgent to enforce request timeouts, payload size limits, and per-client concurrency caps.
- Run CowAgent under a resource-constrained container with CPU, memory, and process limits to bound impact of a successful denial of service attempt.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
