CVE-2026-15331: zhayujie CowAgent path traversal in Skill Installation Handler

CVE-2026-15331 · Severity: medium · CVSS 5.4 · Published 2026-07-10

CowAgent, an AI assistant and agent framework, contains a vulnerability in its skill installation process. An attacker with authenticated access to the management interface can provide a specially crafted skill name to save files outside of the intended directory. This could allow an attacker to overwrite system files or disrupt the application's operations, potentially leading to a loss of system integrity or service availability.

Technologies: Zhayujie CowAgent. Vendors: Zhayujie.

Quick answers

Is CVE-2026-15331 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-15331 being exploited in the wild.
How severe is CVE-2026-15331?
Medium severity, with a CVSS score of 5.4, published 10 July 2026.
Which products and versions are affected?
Zhayujie CowAgent up to 2.1.0.
Is there a fix for CVE-2026-15331?
A patch was published on 2026-06-11: Fix committed in e85290cddcbb5ffc9c235927f4c92e5b4c3ec264 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-15331 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-15331?
Check whether you run Zhayujie CowAgent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A path traversal vulnerability exists in CowAgent versions up to 2.1.0 within the Skill Installation Handler component. The root cause is the lack of sanitization of the 'Name' argument in the _add_url and _add_package functions located in agent/skills/service.py. An authenticated remote attacker can exploit this by supplying a name containing traversal sequences (e.g., '../'), allowing them to write extracted skill content to arbitrary locations outside the designated 'skills/' root directory. This can result in unauthorized file creation or overwriting of existing files. The issue is resolved in version 2.1.2 by implementing a path validation guard.

Affected products

  • zhayujie CowAgent up to 2.1.0

Timeline

  • 2026-06-11: patched: Fix committed in e85290cddcbb5ffc9c235927f4c92e5b4c3ec264
  • 2026-07-10: disclosed: Vulnerability published via VulDB and NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.