Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Apache Camel — Vulnerabilities & Security Advisories 48

All 48 CVE vulnerabilities found in Apache Camel, with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses affecting Apache Camel, focusing on vulnerability aggregation and tracking for this specific enterprise integration framework. It collects data regarding various flaw types, including injection issues, improper input validation, and misconfigurations, covering a comprehensive time range from initial disclosure through recent updates to ensure historical context and current relevance are maintained. Readers can utilize this resource to track vendor advisories issued by the Apache Software Foundation, gain a deeper understanding of specific weakness classes as they apply to integration patterns, and look up the product's vulnerability history to assess risk exposure over time. By aggregating these records, the page serves as a centralized reference for security professionals and developers seeking to identify potential attack vectors within Apache Camel implementations. The information provided is derived from publicly available sources and official security announcements, aiming to provide clarity on the scope and nature of identified defects without speculating on exploitability or severity beyond established classifications. This structured approach allows users to efficiently navigate through complex security landscapes associated with widely used integration tools, facilitating informed decision-making regarding patches, mitigations, and architectural adjustments.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-46588 Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input CWE-20--2026-07-06
CVE-2026-46587 Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input CWE-20--2026-07-06
CVE-2026-49042 Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters CWE-20--2026-07-06
CVE-2026-43866 Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder CWE-502--2026-07-06
CVE-2026-43867 Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter CWE-502--2026-07-06
CVE-2026-49365 Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients CWE-209--2026-07-06
CVE-2026-49098 Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic CWE-20--2026-07-06
CVE-2026-49097 Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users CWE-20--2026-07-06
CVE-2026-48204 Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to switch the GridFS operation - including destructive file deletion - in the default configuration CWE-20--2026-07-06
CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields CWE-74--2026-07-06
CVE-2026-46592 Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation CWE-20--2026-07-06
CVE-2026-46591 Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169) CWE-943--2026-07-06
CVE-2026-46590 Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048) CWE-502--2026-07-06
CVE-2026-46457 Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers CWE-20--2026-07-06
CVE-2026-46456 Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers CWE-20--2026-07-06
CVE-2026-46455 Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted CWE-613--2026-07-06
CVE-2026-46454 Apache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers CWE-20--2026-07-06
CVE-2026-46453 Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation CWE-20--2026-07-06
CVE-2026-43865 Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution CWE-502--2026-07-06
CVE-2026-42527 Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure CWE-502--2026-07-06
CVE-2026-40859 Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled CWE-502--2026-07-06
CVE-2026-40047 Apache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer CWE-88--2026-07-06
CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering CWE-178--2026-05-19
CVE-2026-27172 Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV store CWE-502 8.8AIHighAI2026-04-27
CVE-2026-33453 Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution CWE-915 9.8AICriticalAI2026-04-27
CVE-2026-33454 Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant) CWE-502 9.1AICriticalAI2026-04-27
CVE-2026-40858 Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository CWE-502 8.8AIHighAI2026-04-27
CVE-2026-40860 Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqp CWE-502 9.8AICriticalAI2026-04-27
CVE-2026-23552 Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy CWE-346 5.3AIMediumAI2026-02-23
CVE-2025-30177 Apache Camel: Camel-Undertow Message Header Injection via Improper Filtering 7.5 -2025-04-01

All 48 known CVE vulnerabilities affecting Apache Camel with full Chinese analysis, references, and POCs where available.