CVE-2026-28795: Path Traversal in openchatbi

The core issue lies in the insufficient sanitization of the fileformat parameter within the savereport.py script. While leading dots are stripped, malicious path traversal sequences like /../../ are not adequately handled. Consequently, when constructing the filename, these sequences are preserved, enabling attackers to bypass intended directory restrictions. An attacker could leverage this to overwrite critical system files, inject malicious code, or gain unauthorized access to sensitive data. The potential impact extends beyond simple file manipulation; successful exploitation could lead to complete system compromise.

1. Reserved2026-03-03
2. Published2026-03-02
3. Modified2026-03-06
4. EPSS updated2026-03-23

The primary mitigation is to upgrade to openchatbi version 0.2.2 or later, which includes the necessary input sanitization fixes. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to block requests containing suspicious path traversal sequences in the file_format parameter. Additionally, restrict write access to the report directory to only the necessary user accounts. Regularly review and audit the application's file handling logic to identify and address potential vulnerabilities.