CVE-2026-19763 | DTStack Taier 1.4.0 Cluster Creation ClusterController.java FileUtils.deleteDirectory clusterName path traversal

A vulnerability has been found in DTStack Taier 1.4.0 and classified as critical. Affected by this issue is the function FileUtils.deleteDirectory of the file ClusterController.java of the component Cluster Creation. This manipulation of the argument clusterName causes path traversal.

This vulnerability is registered as CVE-2026-19763. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.