# CVE-2026-108682: zhayujie CowAgent denial of service in /upload endpoint

Source: https://junglewise.ai/threats/cve-2026-108682-a-weakness-has-been-identified-in-zhayujie-cowagent-up-to-2-1-6  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-11. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-108682 · Severity: medium · CVSS 5.4 · Published 2026-10-11

CowAgent is an agent framework with a web console that allows file uploads. The /upload endpoint fails to enforce limits on file size, file count, or total upload size, allowing an attacker with web console access to upload large files or directories that consume memory and disk space, making the service unavailable.

Technologies: [Zhayujie CowAgent](https://junglewise.ai/threats/technologies/cowagent). Vendors: [Zhayujie](https://junglewise.ai/threats/vendors/zhayujie).

## Quick answers

**Is CVE-2026-108682 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108682 being exploited in the wild.

**How severe is CVE-2026-108682?** Medium severity, with a CVSS score of 5.4, published 11 October 2026.

**Which products and versions are affected?** Zhayujie CowAgent up to 2.1.6.

**Is there a fix for CVE-2026-108682?** No fixed version is recorded yet. Restrict network access to the Web Console to trusted users only, or disable the /upload endpoint if file uploads are not required. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-108682 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-108682?** Check whether you run Zhayujie CowAgent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Restrict network access to the Web Console to trusted users only, or disable the /upload endpoint if file uploads are not required.

## Technical details

The vulnerability exists in the /upload endpoint's file handling functions, which read entire uploaded files into memory without size limits using file_obj.read() or file_obj.file.read(). While the codebase contains a safer _read_uploaded_file_bytes_limited() function used elsewhere, the general /upload path does not enforce the 100-file, 10 MiB per-file, and 200 MiB total limits that the Knowledge import feature uses. An authenticated attacker can trigger denial of service by uploading large files or directories with many files, exhausting memory, disk space, and file descriptors.

## Affected products

- zhayujie CowAgent up to 2.1.6

## Timeline

- 2026-10-11: disclosed

## References

- [https://github.com/hackerguopeng/cve/tree/main/CowAgent_Web_Upload_File_Directory_DoS_Report](https://github.com/hackerguopeng/cve/tree/main/CowAgent_Web_Upload_File_Directory_DoS_Report)
- [https://vuldb.com/cve/CVE-2026-108682](https://vuldb.com/cve/CVE-2026-108682)

## Related threats

- [zhayujie CowAgent denial of service in Markdown rendering](https://junglewise.ai/threats/cve-2026-108769-a-security-flaw-has-been-discovered-in-zhayujie-cowagent-up-to-2)
- [zhayujie CowAgent resource exhaustion in tool-call argument parsing](https://junglewise.ai/threats/cve-2026-108768-a-vulnerability-was-identified-in-zhayujie-cowagent-up-to-2-2-0)
- [zhayujie CowAgent uncontrolled memory allocation in media download](https://junglewise.ai/threats/cve-2026-108683-a-security-vulnerability-has-been-detected-in-zhayujie-cowagent)
- [zhayujie CowAgent denial of service in Web Console](https://junglewise.ai/threats/cve-2026-108681-a-security-flaw-has-been-discovered-in-zhayujie-cowagent-up-to-2)
- [zhayujie CowAgent denial of service in Bash tool](https://junglewise.ai/threats/cve-2026-84427-zhayujie-cowagent-denial-of-service-in-bash-tool)