The vulnerability is a file inclusion flaw in TinyAGI 0.0.20. The buildSystemPrompt function can be manipulated to include arbitrary files from the server's file system, allowing an attacker to read sensitive data or potentially execute code if the included content is processed. This weakness is classified as CWE-73 Relative Path Traversal, and the CVE description notes that the attack can be launched remotely. The public exploit indicates that malicious actors could successfully target deployments that have not applied mitigations.

The flaw affects the TinyAGI project, specifically version 0.0.20. This includes the packages/server/src/routes/agents.ts module where the problematic buildSystemPrompt resides. Systems running this exact version are vulnerable until a patch or mitigation is applied. No other versions or vendors are listed as affected.

The CVSS score of 6.9 reflects moderate severity, and while the EPSS score is not provided, the public availability of an exploit lowers the likelihood of unpatched systems remaining safe. The vulnerability is not yet listed in the CISA KEV catalog. An attacker can exploit the flaw remotely without additional credentials, making the risk high for exposed TinyAGI services that have not been hardened against file inclusion.