CVE-2026-95629

A flaw was found in the camel-docling component of Apache Camel. The component fails to validate or sanitize directory paths specified in message headers before passing them to the underlying document conversion tool. An attacker able to influence message headers can exploit this path traversal...