CVE-2026-6129: A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the component Agent Mode Service. Performing a manipulation results in missing a...

Added to the CISA Known Exploited Vulnerabilities catalog on 12 Apr 2026. Vendor: AI/ML. Product: chatgpt. CVSS score: 7.3.

A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the component Agent Mode Service. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The ...

Required action: Review and patch if applicable to your AI infrastructure.