Executive brief
Usagi-org ai-goofish-monitor is a monitoring tool for the Goofish platform. A security flaw in its Windows version allows anyone on the network to read sensitive files from the host server without needing a password. This could lead to the exposure of system configuration files, credentials, or other private data, potentially compromising the entire server.
Technical details
An absolute path traversal vulnerability exists in the 'GET /api/prompts/{filename}' endpoint of ai-goofish-monitor when deployed on Windows. The application implements an incomplete security guard that only checks for forward slashes ('/') and parent directory sequences ('..'). On Windows, an attacker can provide an absolute path (e.g., 'C:\Windows\win.ini') or use backslashes ('\') to bypass this check. Because the application uses 'os.path.join' to construct the file path, Python's 'ntpath' implementation on Windows will discard the intended base directory prefix if the second argument is an absolute path. This allows an unauthenticated remote attacker to read arbitrary files on the filesystem with the privileges of the application process. The issue has been addressed in pull request #489 by implementing a containment check using 'Path.resolve()'.
Affected products
- Usagi-org ai-goofish-monitor <= f85d140
Timeline
- 2026-05-09: disclosed: Issue reported on GitHub
- 2026-05-18: patched: Fix merged into master branch
- 2026-05-28: advisory: CVE published to NVD