CVE-2026-80351

Apache Camel K is affected by an eval injection vulnerability in its dynamically evaluated Maven configuration. Tenant-controlled repository content can influence code execution within the operator pod , potentially allowing tenants to execute arbitrary code with the privileges of the operator . ...

CVE-2026-80354

Apache Camel K is a Kubernetes operator for Apache Camel integration applications. This vulnerability is an authorization bypass in the Builder trait mavenProfiles ValueSources , where custom resource resolution allows a tenant to reference secrets by name in the operator namespace , potentially ...

CVE-2026-80352

Apache Camel K is vulnerable to a YAML injection in the Master trait serviceAccountName field of custom resource configuration. An authorized CR author can inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges of the operator . The vulnerabil...