DTStack vulnerabilities
We track 4 vulnerabilities in DTStack products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2026.
Latest DTStack vulnerabilities
- 7.3 High severity
Taier: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack ma
- 7.3 High severity
Taier: Improper Authentication
A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develop/interceptor/LoginInterceptor.java of the component Source Connection Test Endpoin
- 8.7 High severity
chunjun: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in DTStack chunjun (chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vulnerability is associated with program files GsonUtil.Java. This issue affects chunjun: before 1.16.1.
- 7.5 High severity
Taier: Incorrect Permission Assignment for Critical Resource
An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method.