CVE-2026-10044High· 7.5▾ MidnightPoC availableUsagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{filename} endpoint on Windows deployments that allows unauthenticated remote attackers to read arbitrary files by supplyi…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.6%
Usagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{filename} endpoint on Windows deployments that allows unauthenticated remote attackers to read arbitrary files by supplying absolute Windows paths or backslash-based traversal sequences. Attackers can bypass the incomplete path traversal guard, which only blocks forward slashes and '..', by providing absolute paths such as Windows system file locations, causing os.path.join to discard the intended prompts directory prefix and expose files accessible to the application process.
ai-goofish-monitor < f85d140b6b45029d9a0925feb96dad733b41396dRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123619Medium· 6.8Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Paths
CVE-2026-118693Medium· 4.7CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path
CVE-2026-0846High· 7.5nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function (CVE-2026-0846)
CVE-2026-47243Critical· 9.2Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers
CVE-2026-89009Critical· 9.1WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to th…
CVE-2026-55062High· 8.4uniget is a universal installer and updater for (container) tools