A flaw in the Markdown Rendering component of CowAgent allows an attacker to send crafted input that causes the application to hang or crash, resulting in a denial of service. The vulnerability is a resource missing/overly permissive operation and is verified to be remote and publicly exploitable.

The vulnerability affects the CowAgent product from zhayujie, version 2.2.0 and earlier, specifically within the Markdown.tsx file of the Markdown Rendering component. No sub‑versions or additional build variants are listed, so all installations of CowAgent 2.2.0 or older are potentially impacted.

The CVSS score of 5.3 indicates moderate severity, but the public release of an exploit and the ability to launch the attack remotely increase the practical risk. EPSS data is not available, and the vulnerability is not yet in CISA’s KEV catalog, yet the lack of a vendor response suggests a potential lag in mitigation. Attackers can send the malicious Markdown payload over any network channel that the agent receives input, and the denial of service can take the system offline or make it unresponsive to legitimate users.