CVE-2026-40022

Apache Camel's camel-platform-http-main component contains an authentication bypass vulnerability (CVE-2026-40022 ) affecting versions 4.14.1 to 4.14.5, 4.15.0 to 4.18.1, and other versions before 4.20.0. The root cause is that when a non-root context path (e.g., /api or /admin) is configured and...

CVE-2026-49099

The Apache Camel Salesforce Component is vulnerable to SOQL query override and broken access control (CWE-74, CWE-639) due to improper header handling. The AbstractSalesforceProcessor.getParameter() method prioritizes Exchange message headers over endpoint configurations. Because certain control ...

CVE-2026-55994

Apache Camel's camel-iggy component contains an improper input validation vulnerability where the consumer maps inbound Iggy message user-headers into the Camel Exchange header map without a HeaderFilterStrategy . This allows an attacker who can publish to a consumed Iggy stream to inject interna...

CVE-2026-40048

The camel-pqc component in Apache Camel is vulnerable to unsafe deserialization of untrusted data in the FileBasedKeyLifecycleManager class. The component reads .key files using a raw java.io.ObjectInputStream without any ObjectInputFilter or class-loading restrictions. Because the cast to java.s...

CVE-2026-46588

Apache Camel is vulnerable to an improper input validation issue in the camel-couchdb component. The vulnerability stems from the CouchDbProducer class, where certain Exchange headers (e.g., CouchDbDatabase, CouchDbSeq, CouchDbId, CouchDbRev, and CouchDbMethod) use a non-standard prefix that bypa...

CVE-2026-46590

The Apache Camel PQC component is vulnerable to CWE-502 Deserialization of Untrusted Data (CVE-2026-46590). The HashicorpVaultKeyLifecycleManager, AwsSecretsManagerKeyLifecycleManager, and FileBasedKeyLifecycleManager components use a raw java.io.ObjectInputStream.readObject() to deserialize Base...

CVE-2026-46592

Apache Camel's camel-cxf (and camel-cxfrs ) components are vulnerable to an Unintended Proxy or Intermediary ('Confused Deputy') issue due to improper input validation. The CxfConstants.OPERATION_NAME and OPERATION_NAMESPACE constants were defined as plain strings (operationName / operationNamesp...

CVE-2026-40859

Apache Camel's camel-netty-http and camel-vertx-http components are vulnerable to Remote Code Execution (RCE) via unsafe deserialization of untrusted data (CWE-502 ). The vulnerability exists in NettyHttpHelper and VertxHttpHelper because they use a raw java.io.ObjectInputStream without an Object...

CVE-2026-46587

Apache Camel is vulnerable to an improper input validation flaw in the camel-couchbase component, specifically affecting the CouchbaseProducer class. The root cause is that certain Exchange headers (e.g., CCB_KEY, CCB_ID, CCB_TTL, CCB_DDN, and CCB_VN) use plain names without the standard Camel pr...

CVE-2026-56140

The Apache Camel AWS SNS component (camel-aws2-sns) contains an improper input validation vulnerability in the Sns2HeaderFilterStrategy due to a missing inbound filter rule. While a similar gap in the sibling camel-aws2-sqs component is exploitable, this specific issue is not reachable by an atta...

CVE-2026-46455

The Apache Camel Keycloak Component contains an insufficient session expiration vulnerability (CWE-613 , CWE-287 ) in the KeycloakSecurityHelper.parseAndVerifyAccessToken method. The root cause is the omission of the IS_ACTIVE predicate when building the TokenVerifier. While the helper validates ...

CVE-2026-63621

The Apache Camel Knative component is vulnerable to an injection flaw (CWE-20, CWE-74) due to improper input validation in structured content mode (application/cloudevents+json). While binary content mode filters headers, structured mode copies all CloudEvent extension fields directly into Camel ...

CVE-2026-42527

Apache Camel is vulnerable to a deserialization of untrusted data (CWE-502) issue due to a permissive default ObjectInputFilter. The filter pattern java.**;javax.**;org.apache.camel.**;!* admits java.net.URL and java.net.InetAddress. When deserializing a HashMap containing java.net.URL keys, the ...

CVE-2026-71300

The Apache Camel Atmosphere Websocket component contains an improper input validation vulnerability (CWE-20, CWE-74) affecting versions 4.0.0 before 4.14.9, 4.15.0 before 4.18.4, and 4.19.0 before 4.22.0. The root cause is that certain dispatch headers—such as websocket.connectionKey.list, websoc...

CVE-2026-48203

The Apache Camel Solr component is vulnerable to Server-Side Request Forgery (SSRF) and injection due to improper input validation. The camel-solr producer copies headers starting with the SolrParam. and SolrField. prefixes into Solr request parameters and document fields. Because these prefixes ...

CVE-2026-49365

The Apache Camel framework contains a CWE-209 information disclosure vulnerability in the camel-netty-http and camel-undertow components. Due to an uninitialized primitive boolean, the muteException option defaults to false in these components (unlike jetty, servlet, or platform-http), causing th...

CVE-2026-53913

The Apache Camel Keycloak Component suffers from a fail-open authentication bypass in the KeycloakSecurityPolicy . In the documented "Basic Setup" where requiredRoles and requiredPermissions are empty, the component only checks for the presence of a token but fails to perform cryptographic verifi...

CVE-2026-49097

The Apache Camel IRC component contains an Improper Input Validation vulnerability (CWE-20/CWE-74) within the IrcProducer class. The component uses plain, non-Camel-prefixed header constants (e.g., irc.sendTo) which bypass the HttpHeaderFilterStrategy at the HTTP boundary. This allows an unauthen...

CVE-2026-43865

Apache Camel's camel-hazelcast component is vulnerable to remote code execution (RCE) due to insecure deserialization of untrusted data. When Camel creates a Hazelcast instance using its default configuration (i.e., no user-supplied instance, URI, or bean), it fails to apply a Java deserializatio...

CVE-2026-40047

The camel-docling component in Apache Camel (versions 4.15.0 through 4.18.2 ) is vulnerable to Argument Injection (CWE-88) and Path Traversal (CWE-22). The DoclingProducer class fails to sufficiently validate custom CLI arguments provided via the CamelDoclingCustomArguments header before passing ...

CVE-2026-46454

The Apache Camel Cometd Component suffers from an improper input validation vulnerability (CWE-20) where it fails to apply a HeaderFilterStrategy when mapping inbound Bayeux (CometD) message headers into the Camel Exchange. Specifically, the CometdBinding.populateExchangeFromMessage (or createCam...

CVE-2026-46585

The Apache Camel Lucene Component is vulnerable to an authorization bypass via improper input validation in versions 4.0.0 before 4.14.8, 4.15.0 before 4.18.3, and 4.19.0 before 4.21.0. The root cause is that the producer reads search phrases from the QUERY and RETURN_LUCENE_DOCS headers. Because...

CVE-2026-59230

Apache Camel's camel-mail component contains an improper input validation vulnerability in its MimeMultipart data format. When headersInline is set to true, the component unmarshals MIME multipart messages and copies non-standard MIME headers onto the Camel message without applying a HeaderFilter...

CVE-2026-60093

A relative path traversal vulnerability exists in the Apache Camel camel-azure-storage-datalake component. The downloadToFile operation fails to perform lexical normalization or boundary checks when joining the fileDir endpoint option with remote path names from Azure Data Lake Storage Gen2. This...

CVE-2026-78329

The Apache Camel Undertow component is vulnerable to improper input validation due to an incorrect default configuration where UndertowEndpoint overwrites the specific UndertowHeaderFilterStrategy with a base HttpHeaderFilterStrategy. This causes undertow-specific filtering to be bypassed, allowi...

CVE-2026-56139

The Apache Camel camel-undertow component is vulnerable to information disclosure via CWE-209 due to a deficiency in its error reporting mechanism. The muteException option, which controls whether processing exceptions return details to the client, defaults to false (unlike other Camel components...

CVE-2026-46456

The Apache Camel AWS2-SQS Component contains an Improper Input Validation vulnerability where Sqs2HeaderFilterStrategy lacks an inbound filter. This allows an attacker with sqs:SendMessage permissions to inject arbitrary Camel control headers (e.g., CamelHttpUri, CamelFileName, CamelSqlQuery) int...

CVE-2026-46457

Apache Camel's camel-nats component contains an Improper Input Validation vulnerability (CWE-20) because it defaults to a DefaultHeaderFilterStrategy without inbound rules. This allows a client capable of publishing to a NATS subject (version 2.2+) to inject arbitrary Camel control headers , such...

CVE-2026-46591

The Apache Camel Neo4J component contains a Cypher injection vulnerability (CVE-2026-46591) due to improper neutralization of special elements in data query logic. While property values are correctly bound as parameters, the property names (JSON keys) within the CamelNeo4jMatchProperties map are ...

CVE-2026-46726

Apache Camel's camel-vertx-websocket component is vulnerable to Server-Side Request Forgery (SSRF) and Secret Disclosure due to improper input validation in VertxWebsocketConsumer.populateExchangeHeaders(). The consumer maps inbound WebSocket query and path parameters into the Camel Exchange head...

CVE-2026-80354

An authorization vulnerability in Apache Camel K (versions 2.0.0 to 2.9.3 and 2.10.1 to 2.10.2 ) allows a tenant to bypass security controls via custom resource resolution. An attacker can reference secrets by name within the operator namespace , potentially exposing sensitive secrets belonging t...

CVE-2026-66908

The Apache Camel Platform HTTP Main component (versions 4.8.0 to before 4.22.0) contains an improper authentication vulnerability. When JWT authentication is enabled with a keystore but without jwtIssuer or jwtAudience configurations, the camel-main embedded HTTP server fails to validate the iss ...

CVE-2026-80351

Apache Camel K is vulnerable to an eval injection vulnerability caused by improper neutralization of directives in dynamically evaluated Maven configuration. This flaw allows tenant-controlled repository content to influence code execution within the operator pod , potentially enabling tenants to...

CVE-2026-66907

Apache Camel's camel-google-storage component is vulnerable to a relative path traversal (CWE-22) when the downloadFileName option is used without expression tokens. The consumer fails to perform lexical normalization or boundary checks, allowing object names containing ../ segments to escape the...

CVE-2025-66169

The Apache Camel camel-neo4j component is vulnerable to Cypher Injection because JSON property names from the CamelNeo4jMatchProperties header are concatenated into the Cypher WHERE clause without validation. While property values are bound as query parameters, malicious property names can alter ...

CVE-2026-80352

Apache Camel K is vulnerable to a YAML injection in the Master trait serviceAccountName field of custom resource configuration. An authorized CR author can inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges of the operator . The vulnerabil...