CVE-2026-49086

The Apache Camel camel-dapr component is vulnerable to an Unintended Proxy or Intermediary (Confused Deputy) flaw (CWE-441 ) due to improper input validation. The DaprPubSubConsumer incorrectly copies the pubsubName and topic fields from untrusted inbound CloudEvents into the CamelDaprPubSubName ...