CVE-2026-19762 is a path traversal vulnerability in DTStack Taier version 1.4.0 affecting the Paths.ge function within the FileChunkController.java file of the Chunk-Check Endpoint component. The vulnerability arises from improper validation of the 'Name' argument, enabling remote attackers to traverse directories outside the intended scope. Public exploit code is available, but no known exploitation in the wild has been reported. The CVSS 3.1 base score is 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to perform path traversal, potentially leading to unauthorized access to files and partial compromise of confidentiality, integrity, and availability of the affected system. The impact is rated as medium severity with limited but notable consequences.

No official patch or remediation has been confirmed or provided by the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint and monitor for exploitation attempts. Avoid exposing the vulnerable service to untrusted networks.