CVE-2026-83531

Apache Camel's dynamic-router-control endpoint is vulnerable to Code Injection (CWE-94) and Expression Language Injection (CWE-917). The component improperly takes the subscription predicate and expression language name directly from incoming control messages (via predicate/expressionLanguage fie...