Sensitive Information Disclosure in Apache Camel CoAP Component

CVE-2026-101259

What is CVE-2026-101259?

The CoAP component of Apache Camel contains a vulnerability that allows the generation of error messages revealing sensitive information. When a response cannot be properly built due to issues such as type conversion failures, the system returns an error response containing internal details. This disclosure can include class and package names, the string representation of values, and connection details of backend systems, exposing potentially sensitive data to remote users. It is crucial for users to upgrade to version 4.23.0 or later to implement the new default setting that suppresses such sensitive error messages.

References