Usagi-org ai-goofish-monitor allows an attacker to read arbitrary files on Windows systems through the GET /api/prompts/{filename} endpoint. The flaw resides in an incomplete path traversal guard that only forbids forward slashes and '..' sequences. Because absolute Windows paths or backslash-based traversal strings are accepted, os.path.join removes the intended prompts directory prefix, exposing sensitive files that the application process can access. This is a classic absolute path traversal vulnerability (CWE-36) that can disclose confidential data.

Affects all installations of the ai-goofish-monitor product by Usagi-org that are deployed on Windows. No specific version or patch level is mentioned in the advisory, so every released version that contains the vulnerable endpoint should be considered impacted.

The CVSS score of 8.2 classifies this as a high-severity vulnerability. The lack of an EPSS score indicates there is no publicly available exploitation probability data at the time of the analysis, but the vulnerability is technically simple to exploit via an unauthenticated GET request from a remote host. Since the issue is not listed in the CISA KEV catalog, it has not yet been confirmed in the wild, yet the potential to read arbitrary files warrants prompt remediation.