CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName path traversal Reproductores ejecutables de prueba de concepto para la misma vulnerabilidad de Apache Camel, uno por entorno de ejecución: Entorno de ejecución| Directorio| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the downloadFileName process. An attacker can create or overwrite files outside the intended directory by supplying specially crafted object names containing parent-directory segments in a Google Cloud...

CVE-2026-66907

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when th...

CVE-2026-66907

Apache Camel's camel-google-storage component is vulnerable to a relative path traversal (CWE-22) when the downloadFileName option is used without expression tokens. The consumer fails to perform lexical normalization or boundary checks, allowing object names containing ../ segments to escape the...

CVE-2026-66907 Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when th...

Exploit for CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName path...

CVE-2026-66907: Relative Path Traversal

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when th...

PT-2026-80919

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.8 Apache Camel versions 4.15.0 through 4.18.3 Apache Camel versions 4.19.0 through 4.21.9 Description A relative path traversal issue exists in the camel-google-storage consumer. When the downloadFileNa...