A vulnerability was found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. It has been classified as critical. This affects an unknown function of the component Agent Mode Service. Performing a manipulation results in missing authentication.
This vulnerability is identified as CVE-2026-6129. The attack can be initiated remotely. Additionally, an exploit exists.
It is suggested to use restrictive firewalling.
The project was informed of the problem early through an issue report but has not responded yet.
