A path traversal flaw exists in the Chunk-Check Endpoint of DTStack Taier, specifically in the Paths.ge function of FileChunkController.java. By manipulating the ``name`` query parameter, a remote attacker can cause the server to resolve file paths outside the intended directory, enabling access to arbitrary files on the filesystem. This flaw directly compromises confidentiality, potentially exposing sensitive configuration, credentials, or code files. The vulnerability does not explicitly grant code execution but provides a vector for information leakage. The public availability of an exploit further magnifies the risk of rapid, automated attacks.

DTStack Taier version 1.4.0 is vulnerable. No other affected versions have been explicitly identified, so administrators should verify whether their deployed instance matches 1.4.0 or upstream has identical code paths.

The CVSS score of 6.9 indicates a moderate severity flaw that is exploitable remotely. EPSS data is missing, but the lack of KEV listing does not diminish the public availability of an exploit and the remote nature of the attack. An attacker can send an HTTP request to the Chunk-Check Endpoint with a crafted ``name`` parameter to read files outside the intended directory. Since the flaw exists at the application layer, simple network or web‑application firewall rules might mitigate but will not eliminate the underlying issue.