# CVE-2026-15329: zhayujie CowAgent local file disclosure in Browser Tool

Source: https://junglewise.ai/threats/cve-2026-15329-zhayujie-cowagent-local-file-disclosure-in-browser-tool  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-15329 · Severity: medium · CVSS 4.3 · Published 2026-07-10

CowAgent, an AI assistant framework, contains a vulnerability in its browser tool that allows users to access sensitive local files on the server. By providing a specially crafted file path instead of a web address, an attacker can trick the assistant into reading and displaying the contents of private system files. This could lead to the exposure of configuration data, credentials, or other confidential information stored on the host machine.

Technologies: [Zhayujie CowAgent](https://junglewise.ai/threats/technologies/cowagent). Vendors: [Zhayujie](https://junglewise.ai/threats/vendors/zhayujie).

## Quick answers

**Is CVE-2026-15329 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-15329 being exploited in the wild.

**How severe is CVE-2026-15329?** Medium severity, with a CVSS score of 4.3, published 10 July 2026.

**Which products and versions are affected?** Zhayujie CowAgent up to 2.1.0.

**Is there a fix for CVE-2026-15329?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-15329 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-15329?** Check whether you run Zhayujie CowAgent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Local File Disclosure (LFD) vulnerability exists in CowAgent up to version 2.1.0 within the Browser Tool component. The root cause is the lack of a URL scheme allowlist in the `BrowserTool._do_navigate` function in `agent/tools/browser/browser_tool.py`. The application intentionally preserves non-network schemes like `file://`, `about:`, and `data:`, passing them directly to the Playwright `page.goto()` method. An authenticated remote attacker can provide a `file://` URL to the `navigate` action, causing the underlying Chromium instance to load local system files. The tool then automatically snapshots the page content and returns the file's text to the attacker. As of the advisory date, the project has not responded to the issue report.

## Affected products

- zhayujie CowAgent up to 2.1.0

## Timeline

- 2026-06-09: disclosed: Issue reported on GitHub repository
- 2026-07-10: advisory: CVE published by VulDB/NVD

## References

- [https://github.com/zhayujie/CowAgent/](https://github.com/zhayujie/CowAgent/)
- [https://github.com/zhayujie/CowAgent/issues/2871](https://github.com/zhayujie/CowAgent/issues/2871)
- [https://github.com/zhayujie/CowAgent/issues/2871](https://github.com/zhayujie/CowAgent/issues/2871)
- [https://vuldb.com/cve/CVE-2026-15329](https://vuldb.com/cve/CVE-2026-15329)
- [https://vuldb.com/submit/853098](https://vuldb.com/submit/853098)
- [https://vuldb.com/vuln/377272](https://vuldb.com/vuln/377272)
- [https://vuldb.com/vuln/377272/cti](https://vuldb.com/vuln/377272/cti)

## Related threats

- [zhayujie CowAgent denial of service in Markdown rendering](https://junglewise.ai/threats/cve-2026-108769-a-security-flaw-has-been-discovered-in-zhayujie-cowagent-up-to-2)
- [zhayujie CowAgent resource exhaustion in tool-call argument parsing](https://junglewise.ai/threats/cve-2026-108768-a-vulnerability-was-identified-in-zhayujie-cowagent-up-to-2-2-0)
- [zhayujie CowAgent uncontrolled memory allocation in media download](https://junglewise.ai/threats/cve-2026-108683-a-security-vulnerability-has-been-detected-in-zhayujie-cowagent)
- [zhayujie CowAgent denial of service in /upload endpoint](https://junglewise.ai/threats/cve-2026-108682-a-weakness-has-been-identified-in-zhayujie-cowagent-up-to-2-1-6)
- [zhayujie CowAgent denial of service in Web Console](https://junglewise.ai/threats/cve-2026-108681-a-security-flaw-has-been-discovered-in-zhayujie-cowagent-up-to-2)