CVE-2026-19762
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability was found in DTStack Taier 1.4.0 in the function Paths.ge of the file FileChunkController.java in the Chunk-Check Endpoint component. Manipulation of the argument Name results in path traversal. The attack may be launched remotely, and the exploit has been made public.
Risk Assessment
A remote attacker can read or write arbitrary files on the server, potentially leading to disclosure of sensitive data, modification of system files, or application compromise.
Recommendation
Update DTStack Taier to a patched version. If not possible, restrict access to the Chunk-Check endpoint and apply input validation for the Name argument.
Original NVD description (English source)
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit has been made public and could be used.