CVE-2026-83531

CVE-2026-83531 — camel-dynamic-router: control-endpoint expression-language injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the dynamic-router-control endpoint took the subscription predicate and the name of the language used to compile it from the incoming...

Expression Language Injection

Apache Camel is vulnerable to Expression Language Injection. The vulnerability is due to improper validation of expression language inputs, where DynamicRouterControlService resolves the language from the CamelContext and compiles the expression into a Predicate without any allow‑list, and an...

Exploit for CVE-2026-83531

CVE-2026-83531 — camel-dynamic-router: control-endpoint expres...