Path traversal in Apache Camel - CVE-2026-79986
Published: October 23, 2026
Vulnerability details
The vulnerability allows a remote attacker to read, delete or rename files outside the configured polling directory using the endpoint's credentials.
The vulnerability exists due to improper limitation of a pathname to a restricted directory in the Apache Camel Azure Files consumer when resolving remote paths from server-supplied directory listings without normalization or containment checks. A remote attacker can supply a listing entry containing traversal segments to cause retrieval of files outside the polling directory, or deletion and renaming when the corresponding disposition options are configured.
The Azure Files REST service does not normally return listing names containing multiple path segments, and exploitation against this scheme has not been demonstrated.