Search: CVE-2026-79983

CVE-2026-79983 is a path traversal vulnerability in the Apache Camel FTP component affecting versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability allows an attacker controlling the FTP server or an on-path attacker to craft directory listings with file names that escape the configured polling directory. This leads to unauthorized read, delete, or rename operations on files outside the intended directory using the endpoint's credentials. The issue affects ftp, ftps, and sftp schemes. The vulnerability is fixed in Apache Camel versions 4.18.5 and 4.22.1.