CVE-2026-85254

CVE-2026-85254 — camel-platform-http: request-header echo suppression bypass header-name case Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the guard that stops a request header being reflected into the response compared header names case-sensitively , while HTTP...

Apache Camel 4.22.0 Request Header Echo Suppression Bypass

Apache Camel version 4.22.0 contains a case-sensitive request-header suppression check in camel-platform-http. A proof of concept demonstrates that a lowercased Authorization header can be reflected in the response. https://packetstorm.news/download/236496...

Exploit for CVE-2026-85254

CVE-2026-85254 — camel-platform-http: request-header echo supp...

CVE-2026-85254 Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively, whi...

CVE-2026-85254

The Apache Camel Platform HTTP component is vulnerable to an improper handling of case sensitivity (CWE-178) in versions 4.0.0 before 4.18.5 and 4.19.0 before 4.22.1. The root cause is that the guard intended to prevent request headers from being reflected into responses compares header names cas...

CVE-2026-85254 Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing

Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively, whi...