Path Traversal Vulnerability in Apache Camel's Docling Component

CVE-2026-95629

What is CVE-2026-95629?

An improper limitation of a pathname in Apache Camel's Docling component allows arbitrary file writing in directories accessible to the Camel process. Specifically, when the CamelDoclingOutputFilePath header is set, it does not normalize the path, which means attackers can exploit this to create conversion outputs in unintended locations. This vulnerability is critical for users who cannot ensure that the header is sanitized before being processed by Camel endpoints. Upgrading to the latest version is strongly advised to mitigate this issue and prevent unauthorized file writing.

References