This vulnerability exists in the Vision._download_to_data_url function within the agent/tools/vision/vision.py file of the chatgpt-on-wechat CowAgent product by zhayujie. By manipulating the image argument, an attacker can cause the server to make unauthorized requests, constituting a server-side request forgery. The issue affects versions 2.1.0 and 2.1.1 and can be exploited remotely without user interaction. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity). The vendor has released a patch in version 2.1.2, identified by commit e85290cddcbb5ffc9c235927f4c92e5b4c3ec264, which mitigates the vulnerability.

Successful exploitation of this vulnerability could allow an attacker to make the server perform unauthorized requests to internal or external systems, potentially leading to information disclosure or interaction with internal services not otherwise accessible. The CVSS score of 5.3 reflects a medium severity impact with network attack vector and low complexity. There is no indication of privilege escalation or user interaction required.

A patch is available in version 2.1.2 of chatgpt-on-wechat CowAgent that addresses this vulnerability. Users should upgrade affected installations from versions 2.1.0 and 2.1.1 to 2.1.2. Since this is a cloud service, the vendor manages remediation for the hosted environment; users should verify with the vendor that their cloud instances have been updated accordingly.