18 matches found
apache-camel-docling-security-assessment
CVE-2026-40047 - Apache Camel Docling CLI Argument Injection Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Apache Camel Docling argument validation risk, including technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details...
CVE-2026-40047
camel-docling CLI Argument Injection / Path Traversal Reproducer CVE-2026-40047 This project demonstrates a CLI argument injection and path traversal vulnerability in Apache Camel's camel-docling component, tracked as CVE-2026-40047. DoclingProducer builds the invocation of the external docling...
Exploit for CVE-2026-78163
CVE-2026-78163 — camel-docling: unvalidated body input source...
camel-docling Apache Camel Data Compromise
The vulnerability of the camel-docling component in the Apache Camel framework is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information from a remote location...
Exploit for Argument Injection in Apache Camel
─── CVE-2026-40047 ─── 🏴 AMN SECURITY 🏴 مركز أب...
Exploit for CVE-2026-40047
camel-docling CLI Argument Injection / Path Traversal Reproduc...
CVE-2026-40047
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...
org.apache.camel.karaf:camel-docling (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-docling (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-40047 via org.apache.camel:camel-docling (>=4.15.0, <=4.18.2)
org.apache.camel:camel-docling MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.31.0, =4.15.0, =4.18.2 Source cves: CVE-2026-40047 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892569...
Arbitrary Argument Injection
Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the DoclingProducer custom CLI argument handling in camel-docling. An attacker can pass untrusted values through the CamelDoclingCustomArguments header to make the producer append unintended docling flag...
GHSA-RPV3-6645-2VQC Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...
org.apache.camel.karaf:camel-docling (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-docling (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-40047 via org.apache.camel:camel-docling (>=4.15.0, <=4.18.2)
org.apache.camel:camel-docling MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.31.0, =4.15.0, =4.18.2 Source cves: CVE-2026-40047 Source advisory: OSV:GHSA-RPV3-6645-2VQC...
Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...
org.apache.camel.karaf:camel-docling (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-docling (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-40047 via org.apache.camel:camel-docling (>=4.15.0, <=4.18.2)
org.apache.camel:camel-docling MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.31.0, =4.15.0, =4.18.2 Source cves: CVE-2026-40047 Source advisory: GHSA-RPV3-6645-2VQC...
CVE-2026-40047
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...
org.apache.camel.karaf:camel-docling (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-docling (>=3.29.0, <=3.33.1) +3 more potentially affected by CVE-2026-40047 via org.apache.camel:camel-docling (>=4.15.0, <=4.18.2)
org.apache.camel:camel-docling MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.31.0, =4.15.0, =4.18.2 Source cves: CVE-2026-40047 Source advisory: MEND:CVE-2026-40047...
EUVD-2026-41823
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...
CVE-2026-40047
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...
CVE-2026-40047
The camel-docling component in Apache Camel (versions 4.15.0 through 4.18.2 ) is vulnerable to Argument Injection (CWE-88) and Path Traversal (CWE-22). The DoclingProducer class fails to sufficiently validate custom CLI arguments provided via the CamelDoclingCustomArguments header before passing ...