{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/apache-camel-4.19.0--version--4.22.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-95629"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Apache Camel (4.15.0 \u003c= version \u003c 4.18.5)","Apache Camel (4.19.0 \u003c= version \u003c 4.22.2)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Apache Software Foundation"],"content_html":"\u003cp\u003eApache Camel versions using the camel-docling component (4.15.0 to 4.18.4 and 4.19.0 to 4.22.1) are vulnerable to a path traversal issue (CVE-2026-95629). An authenticated user can supply a crafted output path header to manipulate where the component writes converted file outputs, potentially leading to unauthorized file overwrites or service disruption.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker to write files outside of the intended directory. This can lead to unauthorized file modification, potential corruption of critical system files, or denial of service by overwriting application-specific configuration or binary files.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Apache Camel camel-docling to version 4.18.5 or later for the 4.15.x branch.\u003c/li\u003e\n\u003cli\u003eUpgrade Apache Camel camel-docling to version 4.22.2 or later for the 4.19.x branch.\u003c/li\u003e\n\u003cli\u003eAudit application logs for abnormal file system write operations originating from the camel-docling service process if patching cannot be performed immediately.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-23T14:58:09Z","date_published":"2026-10-23T14:58:09Z","id":"https://feed.craftedsignal.io/briefs/2026-10-apache-camel-docling-traversal/","summary":"An unvalidated output path header in the Apache Camel camel-docling component allows authenticated attackers to perform path traversal and write converted files to arbitrary directories on the host filesystem.","title":"Apache Camel: Path traversal in camel-docling (CVE-2026-95629)","url":"https://feed.craftedsignal.io/briefs/2026-10-apache-camel-docling-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Apache Camel (4.19.0 \u003c= Version \u003c 4.22.2)","version":"https://jsonfeed.org/version/1.1"}