CVE-2026-19758

Name of the Vulnerable Software and Affected Versions dromara lamp-cloud versions prior to 5.10.1

Description A path traversal issue exists in the chunk-check endpoint within the FileChunkController.java file. A remote attacker can manipulate the Name argument to perform path traversal, which allows accessing files or directories outside the intended folder. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the Name argument in the chunk-check endpoint until the issue is resolved.