CVE-2026-58166P2CRITICALCVSS 9.1≤ 2.2.02026-06-30
CVE-2026-58166 [CRITICAL] CWE-22 CVE-2026-58166: OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that
OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename in the file upload endpoint. Attackers can send a crafted filename containing path traversal sequences or an absolute path to the
nvd