CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source Security

CVE-2026-95629: Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory

Posted by Andrea Cosentino on Oct 23 Severity: CVSS 3.1: 5.4 (medium) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected versions: - Apache Camel (org.apache.camel:camel-docling) 4.15.0 before 4.18.5 - Apache Camel (org.apache.camel:camel-docling) 4.19.0 before 4.22.2 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources