Vulnerability · Published Aug 14, 2026 · Assigned by VulDB
CVE-2026-19762DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal
High 7.3
In plain English
A high-severity path traversal in Taier from DTStack. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.6%top 50.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit has been made public and could be used.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-389665 | DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal vdb-entry, technical-description
- VDB-389665 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-19762 | CVE Analysis and Report third-party-advisory
- Submit #868966 | DTStack taier v1.4.0 path traversal third-party-advisory
- https://github.com/DTStack/Taier/issues/1203 exploit, issue-tracking
- https://github.com/DTStack/Taier/ product