Path Traversal in DTStack Taier 1.4.0

Executive Summary

CVE-2026-19761 is a path traversal vulnerability in DTStack Taier 1.4.0. It occurs in the UploadController.java file where the function MultipartFile.getOriginalFilename processes user-uploaded files. The vulnerability allows attackers to manipulate the file path argument to escape the intended upload directory and write files to arbitrary locations on the server.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect Taier instances running versions prior to 1.5.0 for file upload endpoints under /upload/component/*. Check logs for suspicious file paths containing sequences like ../ or absolute paths. Use network monitoring to detect unexpected file writes outside intended directories.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers to write files to arbitrary locations on the server by exploiting path traversal sequences in filenames. This could lead to remote code execution if attackers overwrite critical files like application binaries, configuration files, or scripts. It may also enable denial-of-service attacks by filling up disk space or overwriting important system files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized file writes, potentially leading to data breaches or unauthorized access to sensitive information. GDPR requires protecting personal data, and HIPAA mandates safeguarding protected health information. A successful exploit could result in unauthorized data exposure or system compromise, violating these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Taier to version 1.5.0 or later immediately. If upgrading is not possible, apply the patch from commit 572773c4315e23e51e30115151cb091749a8d03e. Ensure uploaded filenames are sanitized and validated to prevent path traversal sequences.

Useful 0 Not Useful 0