A path traversal flaw exists in the FileChunkController component of dromara lamp-cloud, specifically within the chunk-check endpoint. The flaw is triggered by manipulating the Name argument, allowing an attacker to resolve filesystem paths outside the intended directory and read sensitive files. This vulnerability can compromise confidentiality and, if abused further, could lead to unauthorized access of configuration or system files. The weakness is identified as CWE-22.

dromara lamp-cloud is affected in all versions up to and including 5.10.0. No later versions have been confirmed vulnerable, and the vendor has yet to release a patch.

The CVSS score of 6.9 places this issue in the high severity range, and the EPSS score is not available, indicating a lack of recent exploitation data. The vulnerability is not listed in CISA KEV, but it has been publicly disclosed and is exploitable remotely via HTTP requests to the chunk-check endpoint. An attacker can craft input that causes the system to resolve paths such as ../../../../etc/passwd or similar, enabling file disclosure.