The ai-goofish-monitor product from Usagi-org contains an unauthenticated arbitrary file read vulnerability (CWE-36) in the GET /api/prompts/{filename} endpoint on Windows deployments. The vulnerability is due to incomplete path traversal protection that blocks only forward slashes and '..' sequences but fails to handle absolute Windows paths or backslash-based traversal sequences. Attackers can supply absolute Windows system file paths, causing os.path.join to discard the intended prompts directory prefix and expose arbitrary files readable by the application process. This allows remote attackers to read sensitive files without authentication.

Successful exploitation allows unauthenticated remote attackers to read arbitrary files on the affected Windows system with the privileges of the application process. This can lead to disclosure of sensitive information. There is no indication of impact on integrity or availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — no official fix or remediation guidance is currently available from the vendor. Users should monitor the vendor advisory for updates. Until a fix is released, restricting network access to the vulnerable endpoint or deploying application-layer protections to validate and sanitize input paths may reduce exposure.