This vulnerability exists in DTStack Taier 1.4.0 within the Paths.ge function of the FileChunkController.java file, specifically in the Chunk-Check Endpoint component. The flaw allows remote attackers to manipulate the 'Name' argument to achieve path traversal, potentially accessing unauthorized files or directories. The vulnerability is remotely exploitable without authentication or user interaction. Public exploit code is available, but there is no evidence of active exploitation in the wild. No official patch or remediation level has been provided by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to access files and directories outside the intended scope of the application by traversing the file system. This may lead to unauthorized disclosure of sensitive information or other impacts depending on the files accessed. The vulnerability does not require privileges or user interaction, increasing its risk. However, the overall severity is rated medium (CVSS 6.9).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. In the meantime, restricting network access to the vulnerable endpoint and applying compensating controls to limit exposure may reduce risk.