This vulnerability affects zhayujie CowAgent up to versions 2.1.0 and 2.1.1. The flaw exists in the _select_tools function within the agent/evolution/executor.py file of the Self-Evolution Review Agent component. It allows an attacker to perform unauthorized actions remotely by manipulating authorization logic incorrectly. The CVSS 4.0 base score is 5.3 (medium severity), indicating network attack vector with low complexity and no user interaction required. Although exploit code is public, there is no vendor advisory or patch information available at this time.

An attacker can remotely exploit this vulnerability to bypass authorization controls in the affected component, potentially leading to unauthorized actions within the CowAgent application. The impact is limited by the medium severity score and the requirement for some privileges (PR:L). There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected CowAgent versions 2.1.0 and 2.1.1 and monitor for suspicious activity related to the _select_tools function. Consider applying compensating controls to limit exposure.