OtterMind Chat2DB: Path traversal vulnerability (CVE-2026-124557)
A path traversal vulnerability exists in the DbMybatisGenerateServiceImpl.generateClass function of OtterMind Chat2DB up to version 5.3.8.
CVE search metadata
CVE search record: CVE-2026-124557. Severity: high. CVSS: 7.3. KEV: no. Product: Chat2DB (up to 5.3.8). Brief: OtterMind Chat2DB: Path traversal vulnerability (CVE-2026-124557). Brief link: https://feed.craftedsignal.io/briefs/2026-11-ottermind-chat2db-path-traversal/
Triage facts
Revision 1- Applicability
- Chat2DB (up to 5.3.8)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 9, 07:31 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. The function DbMybatisGenerateServiceImpl.generateClass in DbMybatisGenerateServiceImpl.java (Class Generator component) is impacted. Manipulation of the tableName argument results in path traversal. The attack may be performed from remote. The exploit is public and the vendor did not respond to disclosure.