EUVD-2026-33061
GHSA-93rg-qjp9-mg35
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReconnaissance: discover accessible Ai Goofish Monitor instance on Windows
-
DeliveryDeliver: send crafted HTTP GET request with absolute Windows path or backslash traversal in filename parameter
-
ExploitExploit: bypass incomplete path sanitization due to os.path.join behavior on absolute paths
-
ExecutionExecution: server resolves attacker-controlled file path, discarding intended prompts prefix
-
ImpactImpact: read arbitrary file contents, potentially exposing sensitive system or application data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Absolute path validation
|
| Exploitation Conditions | Exploitation requires a Windows deployment of Ai Goofish Monitor with the vulnerable /api/prompts endpoint exposed over the network. The path traversal guard only blocks forward slashes and ".." sequences, so an attacker can use absolute Windows paths (e.g., C:\folder\file) or backslash-based traversal (..\..\) to escape the prompts directory. The endpoint is remotely accessible without authentication by default, and no special configuration changes are needed-any Windows server running the application is vulnerable unless the endpoint is firewalled. |
| Impact | The CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N) indicates a network-accessible attack with low complexity but attack requirements are present because exploitation is limited to Windows deployments. Confidentiality impact is high, but integrity and availability are unaffected. The EPSS score of 0.05% (bottom 16th percentile) suggests low likelihood of widespread exploitation, and CISA KEV does not list this CVE. SSVC analysis confirms low priority: exploitation is only proof-of-concept (not actively exploited), automatable, and technical impact is partial. While the file read itself poses a serious risk if sensitive files are exposed, the real-world urgency is reduced by the niche footprint of the product and absence of active attacks. |
| Exploit ScenarioDerived | An unauthenticated attacker sends a GET request to /api/prompts/C:\Windows\win.ini (or a backslash traversal sequence such as ..\..\..\..\windows\win.ini) on a Windows-hosted Ai Goofish Monitor instance. The incomplete filter allows the payload, causing the server to read and return the contents of an arbitrary file, such as a system configuration file, which the attacker can then exfiltrate. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 27, 2026
Unauthenticated arbitrary file read in Usagi-org Ai Goofish Monitor on Windows deployments allows remote attackers to read arbitrary files by supplying absolute Windows paths or backslash-based traversal sequences to the /api/prompts/{filename} endpoint. The vulnerability, tracked as CVE-2026-10044, bypasses an incomplete path sanitisation guard that only blocks forward slashes and dot-dot sequences, enabling attackers to access sensitive files such as system configuration files. A publicly available proof-of-concept exists, but the EPSS score is low (0.05%) and there is no evidence of active exploitation at the time of analysis.
RemediationAI
Upgrade to a version of Ai Goofish Monitor that includes the fix from commit f85d140b6b45029d9a0925feb96dad733b41396d or apply the patch from PR #489 manually. The fix replaces the vulnerable os.path.join logic with a safe pathlib.Path containment check. If immediate patching is not possible, restrict network access to the /api/prompts endpoint using a reverse proxy or firewall to only allow trusted sources, or disable the affected feature if not required. Note that these workarounds do not eliminate the underlying vulnerability and may disrupt legitimate use of the prompts API.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is an absolute path traversal (CWE-36) in the Python prompts API route. The application uses os.path.join('prompts', filename) to construct the file path, but on Windows systems, if filename is an absolute path (e.g., C:\Windows\win.ini) or contains backslash traversal (..\..\), os.path.join discards the 'prompts' prefix and uses the attacker-supplied path. The fix replaces the custom sanitisation with a resolve-and-containment check using pathlib.Path, which blocks any path that escapes the intended prompts directory. The CPE cpe:2.3:a:usagi-org:ai-goofish-monitor:*:*:*:*:*:*:*:* indicates the affected product, and the issue was disclosed via VulnCheck advisory and GitHub issue #488.
Know when Ai Goofish Monitor gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Network-accessible, low complexity attack; no privileges or user interaction; file read only, high confidentiality impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
5DescriptionCVE.org
Usagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{filename} endpoint on Windows deployments that allows unauthenticated remote attackers to read arbitrary files by supplying absolute Windows paths or backslash-based traversal sequences. Attackers can bypass the incomplete path traversal guard, which only blocks forward slashes and '..', by providing absolute paths such as Windows system file locations, causing os.path.join to discard the intended prompts directory prefix and expose files accessible to the application process.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Exploit-DB