CVE-2026-85317

CVE-2026-85317 — camel-http: OAuth2 token cache confusion Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-http's OAuth2 client token cache — a JVM-globalstatic map — keyed its entries on only uri, clientId, clientSecret, omitting the fields that actually shape...

Exploit for CVE-2026-85317

CVE-2026-85317 — camel-http: OAuth2 token cache confusion Run...

Apache Camel 4.22.0 OAuth2 Token Cache Confusion

Apache Camel camel-http versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1 contain an OAuth2 token-cache flaw that can reuse a token across endpoints differing by scope, resource indicator, or token endpoint. The supplied proof of concept demonstrates the behavior...