CyberRota Analysis
AI-GeneratedA vulnerability in the zhayujie CowAgent, specifically in the _select_tools function of the agent/evolution/executor.py file, allows for incorrect authorization due to manipulation, which can be exploited remotely. This could lead to unauthorized access or control over the affected systems. Organizations using versions up to 2.1.1 of CowAgent should prioritize patching this vulnerability to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carried out remotely. The exploit is now public and may be used.