A vulnerability has been found in zhayujie chatgpt-on-wechat CowAgent 2.0.4 and classified as critical. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipulation causes missing authentication.
The identification of this vulnerability is CVE-2026-6126. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is advisable to implement restrictive firewalling.
The project was informed of the problem early through an issue report but has not responded yet.
