CVE-2026-28795 OpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBI
Attackers can exploit insufficient input sanitization in the save_report tool to read or modify arbitrary files on the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-28795?
CVE-2026-28795 is a high-severity path traversal vulnerability in zhongyu09 openchatbi, published on 6 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze, and visualize data through natural language conversations. Prior to version 0.2.2, the save_report tool in openchatbi/tool/save_report.py suffers from a critical path traversal vulnerability due to insufficient input sanitization of the file_format parameter. This issue has been patched in version 0.2.2.
Weakness: CWE-22
Which versions are affected by CVE-2026-28795?
3 open source packages ship an affected version, including openchatbi. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
openchatbi PyPI | All versions | 0.2.2 |
openchatbi PyPI | All versions | 0.2.2 |
openchatbi PyPI | All versions | 0.2.2 |
Products include Zhongyu09 Openchatbi.
How do I fix CVE-2026-28795?
Upgrade openchatbi to 0.2.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-28795 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-28795 exists.
Sources
Also known as GHSA-vmwq-8g8c-jm79, PYSEC-2026-2794.