CVE-2026-49086

The Apache Camel camel-dapr component is vulnerable to a confused deputy flaw (CWE-441 ) due to improper input validation. The DaprPubSubConsumer incorrectly copies the pubsubName and topic fields from untrusted inbound CloudEvents into the CamelDaprPubSubName and CamelDaprTopic Exchange headers....