CVE-2026-95629

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer runs the external docling tool in CLI mode, the default, and tells i...

CVE-2026-95629 Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer runs the external docling tool in CLI mode, the default, and tells i...

EUVD-2026-109671

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer runs the external docling tool in CLI mode, the default, and tells i...

CVE-2026-95629

The Apache Camel Docling component is vulnerable to a Path Traversal vulnerability (CWE-22) in versions 4.15.0 to 4.18.4 , 4.19.0 to 4.22.1 , and 4.23.0 (note: fix available in 4.18.5, 4.22.2, and 4.23.0). The DoclingProducer accepts the CamelDoclingOutputFilePath header and passes its value verb...