Authorization Bypass Vulnerability in Apache Camel K
CVE-2026-45760

8.1HIGH

Key Information:

Vendor

Apache
Status
Apache Camel K
Vendor
CVE Published:
21 May 2026

What is CVE-2026-45760?

A vulnerability in Apache Camel K allows authorized users within a Kubernetes namespace to create Build resources that can manipulate Pod generation in an unauthorized namespace, including those utilized by the operator. This enables potential security breaches as users can bypass authorized resource limitations. The recommended resolution is to upgrade to at least version 2.10.1, 2.8.1, or 2.9.2 to mitigate this issue.

Affected Version(s)

Apache Camel K 2.0.0 < 2.8.1

Apache Camel K 2.9.0 < 2.9.2

Apache Camel K 2.10.0 < 2.10.1

References

https://camel.apache.org/security/CVE-2026-45760.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@j311yl0v3u (2439839508@qq.com)
@b0b0haha (603571786@qq.com)
.