It sort of can be, yes. Because a robots.txt file is accessible by anyone, it can be used to identify private areas of your site or restricted content. Put another way, the file itself isn't a vulnerability but it can point bad actors to sensitive areas of your site.