Path Traversal Vulnerability in Apache Camel SMB Component
CVE-2026-79985

7.4HIGH

Key Information:

Vendor: Apache
Status: Apache Camel
Vendor: CVE Published:; 19 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-79985?

A Path Traversal vulnerability exists in the Apache Camel SMB component, allowing attackers to bypass directory restrictions. When Camel's remote-file consumers poll directories on remote servers, they construct absolute paths without proper checks, enabling unauthorized file operations outside the configured directory. An attacker can manipulate the directory listing, leading to potential retrieval, deletion, or renaming of files that are outside the intended path, compromising the security of the system. Upgrading to Apache Camel version 4.23.0 or later is recommended to mitigate this exposure.

Affected Version(s)

Apache Camel 4.2.0 < 4.18.5

Apache Camel 4.19.0 < 4.22.1

Apache Camel 4.18.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-79985
Created by oscerd