CVE-2026-84181 Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse

Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principal...

CVE-2026-84181

The Apache Camel Shiro component (camel-shiro) is vulnerable to an Improper Authentication bypass (CWE-287) in versions 4.0.0 before 4.18.5 , 4.19.0 before 4.22.1 , and 4.15.0 (specifically in Camel Quarkus). The root cause is that the ShiroSecurityProcessor skips credential verification if a Sub...