CVE-2026-19763

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-19763
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19763.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-19763
Published
2026-08-14T00:15:08.895Z
Modified
2026-08-14T04:03:47.439533927Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator
Summary
DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal
Details

A vulnerability was determined in DTStack Taier 1.4.0. Affected by this issue is the function FileUtils.deleteDirectory of the file ClusterController.java of the component Cluster Creation. This manipulation of the argument clusterName causes path traversal. Remote exploitation of the attack is possible. Upgrading to version 1.5.0 can resolve this issue. Patch name: ec8c59c76aceb04ab3080543ab2d9c6a4b674729. The affected component should be upgraded.

Database specific 
{
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19763.json",
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/dtstack/taier

Affected ranges

Type
GIT
Repo
https://github.com/dtstack/taier
Events
Introduced
726c3569c38ef4340f095d8f4edbd09ca4736c5e
Last affected
726c3569c38ef4340f095d8f4edbd09ca4736c5e
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "1.4.0"
        },
        {
            "last_affected": "1.4.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*
1.4.0
v1.*
v1.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19763.json"