CVE-2026-28795: OpenChatBI Path Traversal Vulnerability in save_report Tool
Summary
CVE-2026-28795: OpenChatBI has a Path Traversal Vulnerability in save_report Tool. Affects openchatbi versions < 0.2.2. Fixed in 0.2.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
OpenChatBI is an open-source tool designed for interactive chat-based business intelligence reporting. It allows users to generate and save reports in various formats. However, the tool has a critical vulnerability in its save_report functionality that can be exploited due to inadequate input sanitization.
Vulnerability Detail
The vulnerability arises from the save_report tool located in openchatbi/tool/save_report.py, which fails to properly sanitize the 'file_format' parameter. The function only removes leading dots from the file_format using file_format.lstrip('.') but does not filter out path traversal sequences such as '/../'. This oversight allows attackers to manipulate the input and potentially write files outside the intended report directory. By crafting a malicious file_format, an attacker could overwrite critical system files, such as init.py, leading to severe consequences including remote code execution.
How To Fix
Minimum fixed version
0.2.2
This is the first release that contains the fix.
pip install --upgrade "openchatbi==0.2.2"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no known workarounds for this vulnerability. The best course of action is to update to the patched version as soon as possible.
Conclusion
The OpenChatBI save_report tool has a critical path traversal vulnerability that can lead to severe security risks if not addressed. Users are strongly encouraged to update to the latest version to protect their systems from potential exploitation.
See every vulnerability recorded for openchatbi →
FAQ
A path traversal vulnerability allows an attacker to access files and directories that are stored outside the intended directory. This can lead to unauthorized file access or modification.
If exploited, this vulnerability can allow attackers to overwrite critical files on your system, potentially leading to remote code execution and compromising the security of your application.
Versions of OpenChatBI up to and including 0.2.1 are affected by this vulnerability. It is recommended to upgrade to version 0.2.2 or later.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
The CVSS score for this vulnerability is 8.7, indicating a high severity level.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
