CVE-2026-19011 | TinyAGI 0.0.20 agents.ts buildSystemPrompt file inclusion (Issue 283)

A vulnerability has been found in TinyAGI 0.0.20 and classified as problematic. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion.

This vulnerability was named CVE-2026-19011. The attack may be initiated remotely. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More