Chatgpt On Wechat Cowagent CVE-2026-5998

The vulnerability resides in the API Memory Content Endpoint of the CowAgent component, specifically in the file agent/memory/service.py. The root cause is improper input validation on the filename parameter during the dispatch function, enabling CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) exploitation. An attacker can inject path traversal sequences (such as ../ or absolute paths) into the filename argument to escape the intended directory boundary and access files outside the application's designated memory storage location. This is a classic path traversal attack against a REST API endpoint that performs file operations without sanitizing user-supplied path components.