CVE-2026-80354

Apache Camel K suffers from an authorization bypass in custom resource resolution where a tenant can reference secrets by name in the operator namespace , potentially exposing secrets belonging to other tenants or operator components. The vulnerability stems from mavenProfiles ValueSources resolv...

EUVD-2026-75292

Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...

Authorization Bypass

Apache Camel is vulnerable to Authorization Bypass. The vulnerability is due to insufficient validation of user-controlled Build resources, which allows an authorized attacker to generate Pods in arbitrary Kubernetes namespaces, including the operator namespace...