Authorization Bypass Vulnerability in Apache Camel K
CVE-2026-45760

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Camel K
Vendor
CVE Published:
21 May 2026

What is CVE-2026-45760?

A vulnerability in Apache Camel K allows authorized users within a Kubernetes namespace to create Build resources that can manipulate Pod generation in an unauthorized namespace, including those utilized by the operator. This enables potential security breaches as users can bypass authorized resource limitations. The recommended resolution is to upgrade to at least version 2.10.1, 2.8.1, or 2.9.2 to mitigate this issue.

Affected Version(s)

Apache Camel K 2.0.0 < 2.8.1

Apache Camel K 2.9.0 < 2.9.2

Apache Camel K 2.10.0 < 2.10.1

References

https://camel.apache.org/security/CVE-2026-45760.html
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@j311yl0v3u (2439839508@qq.com)
@b0b0haha (603571786@qq.com)
.