This vulnerability in dromara lamp-cloud up to version 5.10.0 allows remote attackers to perform path traversal via manipulation of the 'Name' argument in the chunk-check endpoint handled by FileChunkController.java. The vulnerability enables unauthorized access to files outside the intended directory structure. Although the exploit has been publicly disclosed, no official remediation or patch has been released by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the server hosting the lamp-cloud application, potentially exposing sensitive information or enabling further attacks. The vulnerability does not require authentication and can be triggered remotely, increasing its risk. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. In the meantime, consider implementing network-level restrictions to limit access to the affected endpoint and validate or sanitize input parameters to mitigate path traversal risks.