CVE-2026-78163

CVE-2026-78163 — camel-docling: unvalidated body input source SSRF + local file disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where DoclingProducer decided what a String message body meant by inspecting its prefix : a body starting with http:// or https:// was...

CVE-2026-95629

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer runs the external docling tool in CLI mode, the default, and tells i...

CVE-2026-95628

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer builds the command line of the external docling tool and appends to ...

EUVD-2026-109677

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer builds the command line of the external docling tool and appends to ...

CVE-2026-95628

A Path Traversal vulnerability exists in the Apache Camel Docling component (versions 4.15.0 to 4.18.5 and 4.19.0 to 4.22.2). The DoclingProducer fails to properly validate path-like arguments in the CamelDoclingCustomArguments header; while it blocks relative traversal sequences like ../, it all...

CVE-2026-95628 Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer builds the command line of the external docling tool and appends to ...

EUVD-2026-109671

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.2. DoclingProducer runs the external docling tool in CLI mode, the default, and tells i...

CVE-2026-40047

camel-docling CLI Argument Injection / Path Traversal Reproducer CVE-2026-40047 This project demonstrates a CLI argument injection and path traversal vulnerability in Apache Camel's camel-docling component, tracked as CVE-2026-40047. DoclingProducer builds the invocation of the external docling...

EUVD-2026-104223

Server-Side Request Forgery SSRF, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0...

CVE-2026-78163 Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure

Server-Side Request Forgery SSRF, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0...

CVE-2026-78163 Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure

Server-Side Request Forgery SSRF, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0...

CVE-2026-78163

The Apache Camel camel-docling component (specifically camel-docling-starter and camel-quarkus-docling) is vulnerable to Server-Side Request Forgery (SSRF) and Local File Disclosure due to unvalidated message body input. The DoclingProducer implicitly determines the source of a String message bod...

PT-2026-117328

Server-Side Request Forgery SSRF, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0...

Exploit for CVE-2026-78163

CVE-2026-78163 — camel-docling: unvalidated body input source...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the DoclingProducer custom CLI argument handling in camel-docling. An attacker can pass untrusted values through the CamelDoclingCustomArguments header to make the producer append unintended docling flag...

GHSA-RPV3-6645-2VQC Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

CVE-2026-40047: Improper Neutralization of Argument Delimiters in a Command

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...