PT-2026-71935 · Dtstack · Dtstack Taier

Ku4D3

·

CVE-2026-19761

·

Published

2026-08-13

·

Updated

2026-08-14

CVSS v2.0

5.8

Medium

VectorAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions DTStack Taier version 1.4.0
Description A path traversal issue exists in the Upload Controller component within the UploadController.java file. The flaw occurs in the MultipartFile.getOriginalFilename() function when processing the File argument, which allows a remote attacker to manipulate file paths.
Recommendations Upgrade to version 1.5.0.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-19761

Affected Products

Dtstack Taier