This vulnerability exists in the Vision Tool component of zhayujie CowAgent, specifically in the _build_image_content/_download_to_data_url functions within agent/tools/vision/vision.py. Improper handling of the image argument enables remote attackers to perform server-side request forgery, potentially causing the server to make unauthorized requests. The vulnerability affects versions 2.1.0 and 2.1.1. A fix has been released in version 2.1.2, identified by patch e85290cddcbb5ffc9c235927f4c92e5b4c3ec264. The product is a cloud service, so vendor-managed remediation is applicable.

Successful exploitation allows an unauthenticated remote attacker to induce the server to make arbitrary HTTP requests, which may lead to information disclosure or interaction with internal systems. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability.

Upgrade zhayujie CowAgent to version 2.1.2 or later, which contains the official patch addressing this SSRF vulnerability. Since this is a cloud service, the vendor typically manages remediation server-side; verify with the vendor advisory to confirm patch deployment status. No additional mitigation steps are specified.