CVE-2026-46454

camel-cometd Inbound Bayeux Header Injection Reproducer CVE-2026-46454 This project demonstrates a message-header injection in Apache Camel's camel-cometd component, tracked as CVE-2026-46454. The component maps inbound Bayeux CometD message headers into the Camel Exchange without...

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered CometD client-supplied headers being copied directly into the Camel Exchange, which allows an attacker to inject Camel control headers and manipulate downstream producers such as HTTP, file, or JMS...

Exploit for Improper Input Validation in Apache Camel

camel-cometd Inbound Bayeux Header Injection Reproducer CVE-2...

org.apache.camel.karaf:camel-cometd (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.0.0-m1, <=3.27.4) +3 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.0.0-m1, <=4.14.7)

org.apache.camel:camel-cometd MAVEN version =4.0.0-m1, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.14.7 Source cves: CVE-2026-46454 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892575...

org.apache.camel.karaf:camel-cometd (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cometd MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46454 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892575...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through CometdBinding.populateExchangeFromMessage in camel-cometd. An attacker can inject Camel control headers into a CometD message by supplying an ext.CamelHeaders map when publishing to a CometD endpoint. T...

org.apache.camel.quarkus:camel-quarkus-cometd (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cometd-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cometd MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46454 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892575...

org.apache.camel.karaf:camel-cometd (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.2.0, <=3.27.4) +3 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cometd MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46454 Source advisory: GHSA-R9CC-J7WR-P329...

org.apache.camel.karaf:camel-cometd (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cometd MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46454 Source advisory: GHSA-R9CC-J7WR-P329...

GHSA-R9CC-J7WR-P329 Apache Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux CometD message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplie...

org.apache.camel.karaf:camel-cometd (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.2.0, <=3.27.4) +3 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cometd MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46454 Source advisory: OSV:GHSA-R9CC-J7WR-P329...

org.apache.camel.karaf:camel-cometd (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cometd MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46454 Source advisory: OSV:GHSA-R9CC-J7WR-P329...

org.apache.camel.quarkus:camel-quarkus-cometd (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cometd-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cometd MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46454 Source advisory: OSV:GHSA-R9CC-J7WR-P329...

org.apache.camel.quarkus:camel-quarkus-cometd (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cometd-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cometd MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46454 Source advisory: GHSA-R9CC-J7WR-P329...

Apache Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux CometD message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplie...

CVE-2026-46454

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux CometD message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplie...

org.apache.camel.karaf:camel-cometd (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.2.0, <=3.27.4) +3 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cometd MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46454 Source advisory: MEND:CVE-2026-46454...

org.apache.camel.karaf:camel-cometd (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-cometd (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cometd MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46454 Source advisory: MEND:CVE-2026-46454...

org.apache.camel.quarkus:camel-quarkus-cometd (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-cometd-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-46454 via org.apache.camel:camel-cometd (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cometd MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46454 Source advisory: MEND:CVE-2026-46454...

EUVD-2026-41828

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux CometD message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplie...