CVE-2026-19762: DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-14 · updated 2026-08-14
Weakness: CWE-22

Description

A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit has been made public and could be used.

Affected products

DTStack Taier: 1.4.0

References

https://github.com/DTStack/Taier/
https://github.com/DTStack/Taier/issues/1203
https://vuldb.com/cve/CVE-2026-19762
https://vuldb.com/submit/868966
https://vuldb.com/vuln/389665
https://vuldb.com/vuln/389665/cti

Get alerted when CVE-2026-19762 or the next vulnerability affects your stack