Approved changes feed: RSS · Atom
cpe:2.3:a:openbmb:chatdev:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openbmb (26ea9d5e-dce7-5beb-bfa5-78a722202424) |
|---|---|
| Product | Chatdev (f9c66a0e-d248-53c9-9037-58f60e872b09) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58166 |
vulnerable | 2026-07-29 01:03:16.662248 |
OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete
CRITICAL (9.1)
OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename in the file upload endpoint. Attackers can send a crafted filename containing path traversal sequences or an absolute path to the POST uploads session endpoint, which constructs the destination path without sanitization in save_upload_file, causing file write and cleanup operations to target attacker-chosen paths on the server filesystem.
Published: 2026-06-30T15:51:20.900Z
Updated: 2026-07-14T21:34:53.320Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.