Home

Description

A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the function dispatch of the file agent/memory/service.py of the component API Memory Content Endpoint. This manipulation of the argument filename causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used. Upgrading to version 2.0.5 mitigates this issue. Patch name: 174ee0cafc9e8e9d97a23c305418251485b8aa89. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

PUBLISHED Reserved 2026-04-09 | Published 2026-04-10 | Updated 2026-04-10 | Assigner VulDB




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
MEDIUM: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
5.0AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C

Problem types

Path Traversal

Product status

2.0.0
affected

2.0.1
affected

2.0.2
affected

2.0.3
affected

2.0.4
affected

2.0.5
unaffected

Timeline

2026-04-09:Advisory disclosed
2026-04-09:VulDB entry created
2026-04-09:VulDB entry last update

Credits

Yu_Bao (VulDB User) reporter

VulDB CNA Team coordinator

References

vuldb.com/vuln/356552 (VDB-356552 | zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal) vdb-entry technical-description

vuldb.com/vuln/356552/cti (VDB-356552 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/submit/793558 (Submit #793558 | zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Path Traversal Leading to Arbitrary File Read) third-party-advisory

github.com/zhayujie/chatgpt-on-wechat/issues/2734 issue-tracking

github.com/zhayujie/chatgpt-on-wechat/issues/2734 exploit issue-tracking

github.com/...ommit/174ee0cafc9e8e9d97a23c305418251485b8aa89 patch

github.com/zhayujie/chatgpt-on-wechat/releases/tag/2.0.5 patch

cve.org (CVE-2026-5998)

nvd.nist.gov (CVE-2026-5998)

Download JSON