CVE-2026-10044

🗓️ 28 May 2026 21:02:21Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Unauthenticated arbitrary file read via GET /api/prompts/{filename} on Windows using absolute paths.

Reporter	Title	Published	Views	Family All 11
attackerkb	CVE-2026-10044	28 May 202621:02	–	attackerkb
Circl	CVE-2026-10044	28 May 202623:02	–	circl
CNNVD	ai-goofish-monitor 安全漏洞	28 May 202600:00	–	cnnvd
Cvelist	CVE-2026-10044 ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/	28 May 202621:02	–	cvelist
EUVD	EUVD-2026-33061	29 May 202600:38	–	euvd
NVD	CVE-2026-10044	28 May 202622:16	–	nvd
OpenVAS	Generic HTTP Directory Traversal / File Inclusion (Web Dirs) - Active Check	22 Jul 202100:00	–	openvas
Positive Technologies	PT-2026-44540	28 May 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-10044: Absolute Path Traversal	28 May 202600:00	–	rapid7
RedhatCVE	CVE-2026-10044	30 May 202608:13	–	redhatcve

Vulners

Node

usagi-org ai-goofish-monitorRange0–f85d140b6b45029d9a0925feb96dad733b41396d

[
  {
    "vendor": "Usagi-org",
    "product": "ai-goofish-monitor",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "f85d140b6b45029d9a0925feb96dad733b41396d",
        "versionType": "git"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
github	www.github.com/Usagi-org/ai-goofish-monitor/issues/488
github	www.github.com/Usagi-org/ai-goofish-monitor/pull/489
github	www.github.com/Usagi-org/ai-goofish-monitor/commit/f85d140b6b45029d9a0925feb96dad733b41396d
vulncheck	www.vulncheck.com/advisories/ai-goofish-monitor-unauthenticated-arbitrary-file-read-via-get-api-prompts

Parameter	Position	Path	Description	CWE
filename	path	/api/prompts/{filename}	Unauthenticated arbitrary file read via path traversal on Windows: the endpoint GET /api/prompts/{filename} accepts a filename and can be tricked into reading arbitrary files by using absolute Windows paths or backslash-based traversal sequences, bypassing incomplete path traversal guards.	CWE-36

21 Jul 2026 10:10Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.5

CVSS 48.2

EPSS0.006

SSVC

CWE-36