apache-camel-docling-security-assessment

CVE-2026-40047 - Apache Camel Docling CLI 参数注入 顾问式网络安全报告 针对 Apache Camel Docling 参数验证风险的专业漏洞评估报告，涵盖技术影响、修复措施和缓解策略。 📍 报告概览...

CVE-2026-40047

camel-docling CLI 参数注入 / 路径遍历复现工具（CVE-2026-40047） 本项目演示了 Apache Camel 的 camel-docling 组件中的一个 CLI 参数注入和路径遍历 漏洞，编号为 CVE-2026-40047 。DoclingProducer 根据消息头构建外部 docling 命令行工具的调用；通过 CamelDoclingCustomArguments 头传入的自定义参数仅经过不充分的校验（一个拒绝列表加上字符串字面量 ../ 检查）即被追加，因此能够影响这些消息头的攻击者可以向子进程注入任意的 docling CLI...

CVE-2026-40047

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

CVE-2026-40047

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

CVE-2026-40047

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

EUVD-2026-41823

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

CVE-2026-40047

CVE-2026-40047 concerns Apache Camel’s camel-docling: Insufficient validation of custom CLI arguments allows argument injection and path traversal in DoclingProducer. The issue arises when unvalidated values in CamelDoclingCustomArguments (or path-bearing headers) reach the external docling tool ...