CVE-2026-49042

CVE-2026-49042 — camel-langchain4j-tools Prompt-Injection → Header-Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/|...

CVE-2026-49042 — Updated!

CVE-2026-49042 — camel-langchain4j-tools Prompt-Injection → Header-Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/|...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822330...

io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822330...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: OSV:GHSA-HH8R-75R6-QRG9https://...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: GHSA-HH8R-75R6-QRG9https://vuln...

io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: OSV:GHSA-HH8R-75R6-QRG9...

io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: GHSA-HH8R-75R6-QRG9...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +14 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.8.0, <=4.18.2)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.8.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =4.8.1, =3.27.0, =3.24.0, =3.26.0, =3.26.0, =3.15.0, =3.15.0, =4.14.0, =4.8.0, =4.18.2 and more Source cves: CVE-2026-49042 Source advisory: MEND:CVE-2026-49042https://vuln...

io.kaoto.forage:forage-memory-infinispan (1.5.0), io.kaoto.forage:forage-memory-message-window (1.5.0) +10 more potentially affected by CVE-2026-49042 via org.apache.camel:camel-langchain4j-tools (>=4.19.0, <=4.20.0)

org.apache.camel:camel-langchain4j-tools MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49042 Source advisory: MEND:CVE-2026-49042...