Path Traversal Vulnerability in DTStack Taier

A path traversal vulnerability exists in DTStack Taier 1.4.0, specifically within the Chunk-Check endpoint handled by the FileChunkController.java file. An unauthenticated remote attacker can exploit the 'Paths.ge' function by manipulating the 'Name' argument. This flaw allows the attacker to bypass directory restrictions and access arbitrary files on the underlying filesystem. Publicly available exploit material exists for this vulnerability, increasing the risk of exploitation. Given the potential for unauthorized file access, organizations utilizing DTStack Taier 1.4.0 are advised to prioritize remediation.

Impact

Successful exploitation allows a remote, unauthenticated attacker to read arbitrary files from the server hosting the Taier application. This can lead to the exposure of sensitive configuration files, credentials, or application data, potentially compromising the integrity and confidentiality of the host environment.

Recommendation

• Upgrade DTStack Taier to a patched version once available to address CVE-2026-19762.
• Implement strict input validation on the 'Name' argument within the 'FileChunkController' endpoint to prevent path traversal characters such as '../'.
• Monitor web server logs for requests to the 'Chunk-Check' endpoint containing path traversal sequences or anomalous filename parameters.