CowAgent Path Traversal Vulnerability in Skill Installation Handler

A path traversal vulnerability has been identified in zhayujie CowAgent versions through 2.1.0. The issue arises in the Skill Installation Handler, specifically within the _add_url and _add_package functions of agent/skills/service.py. The vulnerability allows an authenticated user to manipulate the 'name' argument, causing the application to write files outside the intended 'skills' directory. This could lead to unauthorized overwriting of workspace files and tampering with the agent's persistent state. The vulnerability can be exploited remotely via the cloud management interface.

Impact

Exploitation of this vulnerability allows for path traversal, writing files outside the intended directory, which can overwrite important workspace files and disrupt the agent's state.

Reproduction

To reproduce this vulnerability, upload a skill with a name that includes traversal sequences, such as '../escaped-target', through the LinkAI cloud management interface. This will cause the skill's content to be written outside the designated 'skills' directory, effectively demonstrating the path traversal flaw.

Remediation

Upgrade to CowAgent version 2.1.2, which includes a patch for this vulnerability. Instructions for upgrading are available in the CowAgent documentation.