CVE-2026-28795 Details

A critical path traversal vulnerability has been identified in the save_report tool of OpenChatBI versions through 0.2.1. The issue arises from inadequate input sanitization of the file_format parameter, which only removes leading dots but allows path traversal sequences to pass unchanged. This vulnerability enables attackers to write files outside the designated report directory by manipulating the filename construction process. Exploitation could involve overwriting crucial system files, such as __init__.py, with malicious code that is executed when the application starts, potentially leading to remote code execution.

Users can update to OpenChatBI version 0.2.2, which includes a patch for this vulnerability. The update is available on the OpenChatBI GitHub repository.