HighVulnerabilityLLM-specific
CVE-2026-28795: OpenChatBI path traversal in save_report through file_format parameter
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-28795
- Published
- Record updated
- Affected
- openchatbi <= 0.2.1
- Fixed in
- 0.2.2
- released March 1, 2026, 4 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
CVE-2026-28795 is a path traversal flaw (CWE-22) in the save_report tool in openchatbi/tool/save_report.py of OpenChatBI, an LLM-powered chat BI tool. Prior to version 0.2.2, insufficient sanitization of the file_format parameter lets it traverse paths. GitHub, Inc. rated it CVSS 4.0 8.7 (HIGH) with network attack vector, low complexity, no privileges and no user interaction required, with high confidentiality impact.
Mitigation
This issue has been patched in version 0.2.2.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online