Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling component.

The camel-docling component…

CVE-2026-40047 is an Argument Injection vulnerability in the Apache Camel Docling component (camel-docling), affecting versions 4.15.0 through before 4.18.3. The component invokes the external 'docling' CLI tool via java.lang.ProcessBuilder, assembling arguments from exchange headers including CamelDoclingCustomArguments. The original implementation used a weak denylist-based validation that only rejected literal '../' path sequences, allowing attackers to inject unrecognized CLI flags and perform directory traversal through alternative traversal sequences. Because ProcessBuilder is used in list-based form, OS shell command injection via metacharacters was not possible, but CLI argument injection and path traversal remained exploitable. The fix, included in Apache Camel 4.19.0 and 4.18.3 (LTS), replaces the denylist with a strict allowlist of recognized docling CLI flags, adds metacharacter rejection, and normalizes path values using Path.normalize(). Users are advised to upgrade immediately and avoid mapping untrusted content into relevant Camel headers.