CVE-2026-49086

camel-dapr Consumer-Routing-Header-Override / Confused-Deputy-Reproducer CVE-2026-49086 Dieses Projekt demonstriert einen Routing-Header-Override- Confused-Deputy-Fehler in der camel-dapr-Komponente von Apache Camel, der als CVE-2026-49086 verfolgt wird. Der Dapr-Pub/Sub-Consumer DaprPubSubConsum...

The vulnerability of the DaprPubSubConsumer class in the camel-dapr component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the DaprPubSubConsumer class in the camel-dapr framework of the Apache Camel framework is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the DaprPubSubConsumer process. An attacker can redirect or exfiltrate messages and bypass intended routing and topic-level access controls by publishing specially crafted CloudEvents with manipulated...

CVE-2026-49086

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...