The vulnerability resides in the _add_url/_add_package functions of CowAgent's Skill Installation Handler. By manipulating the Name argument, an attacker can perform path traversal, allowing the reading or writing of files outside the intended directory. This can enable placement of malicious files or corruption of critical data, potentially providing a foothold for further compromise or denial of service. The flaw alone does not the application runs with elevated privileges.

All releases of CowAgent up to version 2.1.0, including the 2.1.0 baseline, are affected. The issue was fixed in release 2.1.2 via commit e85290cddcbb5ffc9c235927f4c92e5b4c3ec264, which removes the insecure handling of the Name parameter in service.py. Users running any earlier version should upgrade promptly.

The CVSS base score of 5.3 reflects moderate severity. The EPSS score is less than 1%, and the vulnerability is not listed in CISA's KEV catalog, indicating low to moderate exploitation likelihood. The attack vector is invoke the Skill Installation API via its exposed interface. While the flaw alone does not provide code execution, it enables arbitrary file operations that could be used to drop scripts or overwrite executables if the process runs with elevated privileges, providing a potential escalation pathway.