CVE-2026-94386

A flaw was found in Apache Camel's OAuth component. The token resolver improperly caches and shares OAuth access tokens across different authentication profiles that use the same endpoint and client identifier, without accounting for differences in requested scopes or credentials. As a result,...