CVE-2026-40047 -- CVSS 9.1 Vulnerability Briefing

CVE-2026-40047 | CVSS 9.1 (Critical) | Exploit: No known exploit

What Is It

CVE-2026-40047 is an argument injection vulnerability in the Apache Camel Docling component, which allows improperly neutralized input to be passed as argument delimiters to an externally invoked command.

Technical Detail

The camel-docling component constructs a command-line invocation of the external docling binary without adequately sanitizing user-controlled input, allowing an attacker to inject arbitrary arguments into the executed command. Depending on the arguments accepted by the underlying binary and the privileges of the running process, this could lead to remote code execution, unauthorized file access, or other unintended system-level operations. The flaw carries a CVSS score of 9.1, reflecting the high potential impact and the relatively low complexity typically associated with argument injection attacks against components that shell out to external tools.

Exploitation Status

No known exploit exists for this vulnerability at this time. The exploit maturity is currently assessed as none, and this CVE is not listed in the CISA Known Exploited Vulnerabilities catalog. No public proof-of-concept code has been confirmed as of July 12, 2026.

Who Is Targeting This

No specific threat actor attribution at this time. Neither confirmed nor reported threat actor activity has been associated with this vulnerability.

What To Do

Organizations using Apache Camel with the Docling component should treat this as a high-priority patch given the critical CVSS score of 9.1. Apply the vendor-supplied patch or upgrade to a fixed version of Apache Camel as soon as one is available from the Apache Software Foundation. In the interim, if the camel-docling component is not operationally required, disable or remove it to eliminate the attack surface. Where disabling is not feasible, restrict the inputs processed by the component to trusted, validated sources and ensure the process runs under a least-privilege account to limit the impact of any exploitation. Monitor process execution logs for anomalous child processes spawned by the Camel runtime, particularly unexpected invocations of the docling binary with unusual argument patterns.