Search: CVE-2026-79985

CVE-2026-79985 is a path traversal vulnerability in the Apache Camel SMB component affecting versions from 4.2.0 before 4.18.5 and from 4.19.0 before 4.22.1. The flaw allows an attacker controlling the remote server or an on-path attacker to manipulate directory listings to cause Apache Camel to access files outside the intended polling directory. This can lead to unauthorized file retrieval, deletion, or renaming using the endpoint's credentials. The vulnerability arises because Apache Camel does not properly normalize or validate remote file paths before performing operations. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1.