DTStack Taier vulnerabilities
5 known CVE vulnerabilities in DTStack Taier, translated and rated.
- CVE-2026-19763Low
A vulnerability was determined in DTStack Taier version 1.4.0, affecting the FileUtils.deleteDirectory function in ClusterController.java. Manipulation of the clusterName argument causes path traversal. Remote exploitation is possible.
- CVE-2026-19762High
A vulnerability was found in DTStack Taier 1.4.0 in the function Paths.ge of the file FileChunkController.java in the Chunk-Check Endpoint component. Manipulation of the argument Name results in path traversal. The attack may be launched remotely, and the exploit has been made public.
- CVE-2026-19761Medium
A vulnerability was found in DTStack Taier version 1.4.0, affecting the MultipartFile.getOriginalFilename function in UploadController.java. Manipulation of the File argument leads to path traversal. The attack can be initiated remotely.
- CVE-2026-11618High
DTStack Taier up to version 1.4.0 has a vulnerability in the preHandle function in LoginInterceptor.java related to the source connection test endpoint. Remote exploitation can bypass authentication. Exploit publicly disclosed.
- CVE-2026-9437Medium
A vulnerability in DTStack Taier 1.4.0. The Runtime.exec function in the REST API component allows OS command injection via the sqlText argument. Remote attack, exploit public.