CVE-2026-19756

Name of the Vulnerable Software and Affected Versions Dromara lamp-cloud versions prior to 5.10.1

Description A path traversal issue exists in the Code Generator component within the DefGenProjectController.java file. A remote attacker can exploit this by manipulating the outputDir, parent, or projectPrefix arguments, allowing them to access or traverse directories outside the intended path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.