Search: CVE-2026-79984

CVE-2026-79984 is a path traversal vulnerability in the Apache Camel Mina SFTP component affecting versions from 4.18.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability arises because the component concatenates directory paths with file names from the remote server without proper normalization or containment checks, allowing an attacker to access files outside the intended directory. This can lead to unauthorized reading, deletion, or renaming of files on the remote server. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1.