CVE-2026-19758: dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19758?
The severity of CVE-2026-19758 is rated as high with a score of 7.3.
How do I fix CVE-2026-19758?
To fix CVE-2026-19758, update the dromara lamp-cloud software to version 5.10.1 or later.
What is the impact of CVE-2026-19758?
CVE-2026-19758 allows remote attackers to exploit a path traversal vulnerability via manipulating the argument in FileChunkController.java.
Is CVE-2026-19758 exploitable remotely?
Yes, CVE-2026-19758 can be exploited remotely.
What component is affected by CVE-2026-19758?
CVE-2026-19758 affects the chunk-check endpoint in the FileChunkController.java component of dromara lamp-cloud.