# CVE-2026-15331: zhayujie CowAgent path traversal in Skill Installation Handler

Source: https://junglewise.ai/threats/cve-2026-15331-zhayujie-cowagent-path-traversal-in-skill-installation-handler  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-15331 · Severity: medium · CVSS 5.4 · Published 2026-07-10

CowAgent, an AI assistant and agent framework, contains a vulnerability in its skill installation process. An attacker with authenticated access to the management interface can provide a specially crafted skill name to save files outside of the intended directory. This could allow an attacker to overwrite system files or disrupt the application's operations, potentially leading to a loss of system integrity or service availability.

Technologies: [Zhayujie CowAgent](https://junglewise.ai/threats/technologies/cowagent). Vendors: [Zhayujie](https://junglewise.ai/threats/vendors/zhayujie).

## Quick answers

**Is CVE-2026-15331 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-15331 being exploited in the wild.

**How severe is CVE-2026-15331?** Medium severity, with a CVSS score of 5.4, published 10 July 2026.

**Which products and versions are affected?** Zhayujie CowAgent up to 2.1.0.

**Is there a fix for CVE-2026-15331?** A patch was published on 2026-06-11: Fix committed in e85290cddcbb5ffc9c235927f4c92e5b4c3ec264 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-15331 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-15331?** Check whether you run Zhayujie CowAgent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability exists in CowAgent versions up to 2.1.0 within the Skill Installation Handler component. The root cause is the lack of sanitization of the 'Name' argument in the _add_url and _add_package functions located in agent/skills/service.py. An authenticated remote attacker can exploit this by supplying a name containing traversal sequences (e.g., '../'), allowing them to write extracted skill content to arbitrary locations outside the designated 'skills/' root directory. This can result in unauthorized file creation or overwriting of existing files. The issue is resolved in version 2.1.2 by implementing a path validation guard.

## Affected products

- zhayujie CowAgent up to 2.1.0

## Timeline

- 2026-06-11: patched: Fix committed in e85290cddcbb5ffc9c235927f4c92e5b4c3ec264
- 2026-07-10: disclosed: Vulnerability published via VulDB and NVD

## References

- [https://github.com/zhayujie/CowAgent/](https://github.com/zhayujie/CowAgent/)
- [https://github.com/zhayujie/CowAgent/commit/e85290cddcbb5ffc9c235927f4c92e5b4c3ec264](https://github.com/zhayujie/CowAgent/commit/e85290cddcbb5ffc9c235927f4c92e5b4c3ec264)
- [https://github.com/zhayujie/CowAgent/issues/2873](https://github.com/zhayujie/CowAgent/issues/2873)
- [https://github.com/zhayujie/CowAgent/pull/2886](https://github.com/zhayujie/CowAgent/pull/2886)
- [https://github.com/zhayujie/CowAgent/releases/tag/2.1.2](https://github.com/zhayujie/CowAgent/releases/tag/2.1.2)
- [https://vuldb.com/cve/CVE-2026-15331](https://vuldb.com/cve/CVE-2026-15331)
- [https://vuldb.com/submit/853104](https://vuldb.com/submit/853104)

## Related threats

- [zhayujie CowAgent denial of service in Markdown rendering](https://junglewise.ai/threats/cve-2026-108769-a-security-flaw-has-been-discovered-in-zhayujie-cowagent-up-to-2)
- [zhayujie CowAgent resource exhaustion in tool-call argument parsing](https://junglewise.ai/threats/cve-2026-108768-a-vulnerability-was-identified-in-zhayujie-cowagent-up-to-2-2-0)
- [zhayujie CowAgent uncontrolled memory allocation in media download](https://junglewise.ai/threats/cve-2026-108683-a-security-vulnerability-has-been-detected-in-zhayujie-cowagent)
- [zhayujie CowAgent denial of service in /upload endpoint](https://junglewise.ai/threats/cve-2026-108682-a-weakness-has-been-identified-in-zhayujie-cowagent-up-to-2-1-6)
- [zhayujie CowAgent denial of service in Web Console](https://junglewise.ai/threats/cve-2026-108681-a-security-flaw-has-been-discovered-in-zhayujie-cowagent-up-to-2)