Improper Input Validation in Apache Camel by Apache
CVE-2026-46588

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Camel
Vendor
CVE Published:
6 July 2026

What is CVE-2026-46588?

An improper input validation vulnerability has been identified in Apache Camel. This flaw allows attackers to submit invalid input data, potentially leading to unexpected behavior in applications using vulnerable versions of the software. It is crucial for users to promptly update to secure versions—4.14.8, 4.18.3, or 4.21.0—to mitigate the risks associated with this vulnerability.

Affected Version(s)

Apache Camel 0 <= 4.14.7

Apache Camel 4.15.0 <= 4.18.2

Apache Camel 4.19.0 <= 4.20.0

References

https://camel.apache.org/security/CVE-2026-46588.html
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yu Bao - yubao@paypal.com, who works for paypal.com.
.