# Apache Camel Vulnerabilities Allow Remote Code Execution, Authentication Bypass, and Data Theft (CVE-2026-80352, CVE-2026-80351 and 6 others)

> Apache Camel disclosed eight vulnerabilities: two Critical in Camel K (Kubernetes YAML injection and tenant-controlled Maven execution in the operator pod) and six High in Camel components (JGroups and Spring Redis unsafe deserialization, OAuth fail-open authentication, HTTP placeholder injection, HTTP redirect credential leak, Smooks XXE). Fixes are available in Camel 4.18.5, 4.22.1, 4.23.0 and Camel K 2.9.3, 2.10.2, 2.11.0; no in-the-wild exploitation or public PoC was found in the sources reviewed.

- **Published:** 2026-10-26T12:08:49Z
- **Last reviewed:** 2026-10-26T12:08:49Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-4449
- **ID:** TL-2026-4449
- **Severity:** CRITICAL (CVSS 9.8)
- **Category:** VULNERABILITY
- **Status:** PATCHED
- **Detections:** 9 · **IOCs:** 6 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-80352, CVE-2026-80351, CVE-2026-88900, CVE-2026-78165, CVE-2026-80312, CVE-2026-78164, CVE-2026-85251, CVE-2026-88901

## Description

On 2026-10-15 the Apache Camel project published a batch of security advisories (reported as 38 in total) fixed in Camel 4.18.5, 4.22.1 and 4.23.0. Eight of them are tracked here, together with two Critical Camel K issues published in September 2026.

Camel K (CVE-2026-80352, CVE-2026-80351; Critical; affects 2.0.0 before 2.9.3 and 2.10.0 before 2.10.2; fixed in 2.9.3, 2.10.2, 2.11.0). CVE-2026-80352 is a YAML injection through the Master trait serviceAccountName field (CWE-94) that lets an author of a Camel K custom resource cause arbitrary Kubernetes objects to be applied with the operator's privileges; NVD lists CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). CVE-2026-80351 is an eval-injection style flaw (improper neutralization of directives in dynamically evaluated Maven configuration) in which tenant-supplied repositories reach Maven execution inside the operator pod, potentially giving the tenant code execution with operator privileges.

Camel-JGroups (CVE-2026-88900): the JGroups consumer deserializes cluster messages without an ObjectInputFilter, so any serializable class on the classpath can be instantiated and its deserialization callbacks run. Exploitation needs network access to the cluster multicast group or UDP bind port plus a usable gadget chain on the classpath. Affects 4.0.0 before 4.18.5 and 4.19.0 before 4.22.1. Mitigations: jdk.serialFilter JVM filter, JGroups AUTH plus SYM_ENCRYPT/ASYM_ENCRYPT via channelProperties, and keeping the cluster off untrusted networks. 4.23.0 requires at least one pre-deserialization control on consumers.

Camel-Spring-Redis (CVE-2026-78165; CWE-502): the default JdkSerializationRedisSerializer reads Redis payloads with no ObjectInputFilter, so anyone able to PUBLISH to a subscribed channel can reach remote code execution before route validation. Affects 2.11.0 before 4.18.5 and 4.19.0 before 4.22.1. Workarounds: -Djdk.serialFilter, a non-Java serializer such as StringRedisSerializer, and Redis authentication with restricted publish rights. The fix adds a deserializationFilter endpoint option that blocks java.net classes.

Camel-OAuth (CVE-2026-80312; CWE-287): the OAuth processors returned control to the route when authentication could not be completed, so failed-authentication requests were processed as successful (fail-open). Affects 4.11.0 before 4.18.5 and 4.19.0 before 4.22.1 (the advisory index lists 4.0.0 as the lower bound). Workaround: add an explicit authorization check after the OAuth processor.

Camel HTTP producers (CVE-2026-78164): property placeholders are resolved in the message-supplied CamelHttpUri and CamelRestHttpUri headers, so an unauthenticated sender can expand environment variables, system properties, cloud vault secrets (AWS, Azure, GCP) and invoke bean methods. Affects camel-http, camel-http-common, camel-vertx-http, camel-undertow and camel-netty-http. Workarounds: removeHeader on both headers at trust boundaries; skipControlHeaders=true (camel-http only); bridgeEndpoint=true is not a full mitigation. Sources disagree on the lower affected bound (4.0.0 vs 4.15.0); fixed in 4.18.5, 4.22.1, 4.23.0.

Camel-HTTP (CVE-2026-85251; CWE-200): with followRedirects=true the Authorization header (OAuth2 bearer tokens, basic and digest credentials) is re-attached to whatever host the Location header names, so a malicious or compromised remote endpoint can harvest credentials with a redirect. Affects 4.0.0 before 4.18.5 and 4.19.0 before 4.22.1. Workaround: followRedirects=false.

Camel-Smooks (CVE-2026-88901; CWE-611): the Smooks data format and component parse the XML body with Smooks' default reader, which resolves external general and parameter entities and loads external DTDs, enabling local file reads and requests to internal hosts. Affects 4.7.0 before 4.18.5 and 4.19.0 before 4.22.1. The fix uses a hardened DocumentBuilder.

The sources reviewed (Apache Camel advisories, NVD for CVE-2026-80352, Openwall postings) do not report in-the-wild exploitation, public PoC code, threat actor activity or network IOCs. A partial read of the CISA KEV feed (first 100,000 characters) did not show any of these CVEs; the full feed was not checked. CVSS scores other than the NVD 9.8 for CVE-2026-80352 were not found; Apache rates the Camel K issues Critical and the rest High.

## MITRE ATT&CK

- T1190 Exploit Public-Facing Application
- T1059 Command and Scripting Interpreter
- T1610 Deploy Container
- T1552 Unsecured Credentials
- T1528 Steal Application Access Token
- T1005 Data from Local System

## Sources

- [Apache Camel Vulnerabilities Allow Remote Code Execution, Authentication Bypass, and Data Theft](https://gbhackers.com/apache-camel-vulnerabilities/)
- [Apache Camel Security Advisories](https://camel.apache.org/security/)
- [CVE-2026-80352 Apache Camel K Master trait YAML injection](https://camel.apache.org/security/CVE-2026-80352.html)
- [CVE-2026-80351 Apache Camel K tenant repositories reach Maven execution](https://camel.apache.org/security/CVE-2026-80351.html)
- [CVE-2026-88900 Camel-JGroups unsafe deserialization](https://camel.apache.org/security/CVE-2026-88900.html)
- [CVE-2026-78165 Camel-Spring-Redis unsafe deserialization](https://camel.apache.org/security/CVE-2026-78165.html)
- [CVE-2026-80312 Camel-OAuth authentication bypass](https://camel.apache.org/security/CVE-2026-80312.html)
- [CVE-2026-78164 Camel HTTP producers property placeholder injection](https://camel.apache.org/security/CVE-2026-78164.html)
- [CVE-2026-85251 Camel-HTTP credential disclosure on redirect](https://camel.apache.org/security/CVE-2026-85251.html)
- [CVE-2026-88901 Camel-Smooks XXE](https://camel.apache.org/security/CVE-2026-88901.html)
- [NVD CVE-2026-80352](https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80352)
- [oss-security: Apache Camel CVE-2026-80352](http://www.openwall.com/lists/oss-security/2026/09/10/15)
- [oss-security: Apache Camel advisories batch](https://www.openwall.com/lists/oss-security/2026/10/18/2)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-4449