Vulnerabilities

TI-2026-55491 CVE-2026-80354 · GHSA-3r9g-8jw6-fcwx

Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace

LOW 38

Authorization bypass through User-Controlled key vulnerability in Apache Camel K.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00499 Published 2026-09-10 Fixed in 2.9.3, 2.10.2 CWE-639

TI-2026-55489 CVE-2026-80351 · GHSA-x48w-5g24-c9q7

MEDIUM 51

Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01013 Published 2026-09-10 Fixed in 2.9.3, 2.10.2 CWE-95

TI-2026-55490 CVE-2026-80352 · GHSA-q6c4-485h-g4m5

MEDIUM 50

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2026-09-10 Fixed in 2.9.3, 2.10.2 CWE-94