CVE-2026-19011
Received Received - Intake

File Inclusion in TinyAGI 0.0.20

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-19011
EUVD
EUVD-2026-53791

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
tinyagi tinyagi to 0.0.20 (exc)
tinyagi tinyagi 0.0.20

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19011 is an arbitrary local file disclosure vulnerability in TinyAGI versions 0.0.20 and earlier. The issue stems from an unauthenticated agent-configuration API endpoint that allows attackers to set a prompt_file parameter to any local file path readable by the TinyAGI process. When a message is sent to the agent, the system reads the specified file and includes its contents in the prompt sent to the model provider, effectively exfiltrating the file's contents.

Detection Guidance

Check for unauthorized access to the agent-configuration API endpoint by monitoring logs for requests containing the prompt_file parameter. Inspect file read operations on the server, particularly those involving paths like /etc/passwd, /home/user/.ssh/id_rsa, or other sensitive files. Use commands like grep to search logs for prompt_file usage or unexpected file reads.

Impact Analysis

This vulnerability can expose sensitive files such as workspace documents, source code, operational notes, or API credentials. Attackers can remotely initiate the attack to read files on the system where TinyAGI is running without authentication.

Mitigation Strategies

Upgrade TinyAGI to a version newer than 0.0.20 where the vulnerability is patched. If upgrading is not immediately possible, disable the agent-configuration API endpoint or restrict access to authenticated users only. Implement input validation to reject prompt_file paths outside allowed directories. Monitor for suspicious API requests or file reads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19011. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart