CVE-2026-6126

A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2026-6126

creationtimestamp| type| source ---|---|--- 2026-04-12 12:44:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcexr3jzj22 2026-04-12 13:15:23+00:00| published-proof-of-concept| Telegram/MAArghuJr9V3EBWp3NdbOgL0SAw37FjqzKr6qVSads5vX0...

CVE-2026-6126

CVE-2026-6126 affects zhayujie chatgpt-on-wechat CowAgent 2.0.4. The weakness resides in an unknown function of the Administrative HTTP Endpoint, leading to missing authentication. It can be triggered remotely, and the exploit has been made public. Multiple sources note that the project was alert...