A path traversal vulnerability (CVE-2026-5998) affects the zhayujie chatgpt-on-wechat CowAgent component API Memory Content Endpoint in versions 2.0.0 through 2.0.4. The issue arises from improper handling of the filename argument in agent/memory/service.py, enabling remote attackers to manipulate file paths and potentially access unauthorized files. The vendor responded promptly and released a fixed version 2.0.5. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity) with network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality.

Successful exploitation of this vulnerability allows remote attackers to perform path traversal attacks, potentially accessing files outside the intended directory scope. The CVSS score of 6.9 reflects a medium impact primarily due to the ability to access unauthorized files remotely without authentication. There is no indication of privilege escalation, denial of service, or integrity impact. No known exploits in the wild have been reported at this time.

A fixed version 2.0.5 of chatgpt-on-wechat CowAgent has been released by the vendor to address this vulnerability. It is recommended to upgrade affected installations from versions 2.0.0 through 2.0.4 to version 2.0.5. Since this is not a cloud service, users must apply the update manually. Patch status is confirmed by the vendor's prompt release. No additional mitigation steps are indicated by the vendor advisory.