CVE-2026-46457 Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

🗓️ 06 Jul 2026 07:57:13Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Apache Camel NATS inbound headers are not filtered by default, enabling injection of Camel headers.

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for Improper Input Validation in Apache Camel	14 Jul 202610:11	–	githubexploit
ATTACKERKB	CVE-2026-46457	6 Jul 202607:57	–	attackerkb
Circl	CVE-2026-46457	5 Jul 202619:48	–	circl
CVE	CVE-2026-46457	6 Jul 202607:57	–	cve
Cvelist	CVE-2026-46457 Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers	6 Jul 202607:57	–	cvelist
EUVD	EUVD-2026-41831	6 Jul 202607:57	–	euvd
NVD	CVE-2026-46457	6 Jul 202609:16	–	nvd
Positive Technologies	PT-2026-55892	6 Jul 202600:00	–	ptsecurity
Snyk	Improperly Controlled Modification of Dynamically-Determined Object Attributes	6 Jul 202610:35	–	snyk
Vulnrichment	CVE-2026-46457 Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers	6 Jul 202607:57	–	vulnrichment

Source	Link
openwall	www.openwall.com/lists/oss-security/2026/07/05/10
repo	www.repo.maven.apache.org/maven2
camel	www.camel.apache.org/security/CVE-2026-46457.html
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46457.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46457

09 Jul 2026 04:02Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5

EPSS0.00423

camel nats header filter header injection control headers nats headers vulnerability fixed 4.21.0