CVE-2026-80354

Apache Camel K suffers from an authorization bypass in custom resource resolution where a tenant can reference secrets by name in the operator namespace , potentially exposing secrets belonging to other tenants or operator components. The vulnerability stems from mavenProfiles ValueSources resolv...

CVE-2026-80354 Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace

Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...