Authorization Bypass in Apache Camel Salesforce Component
CVE-2026-49099

5.3MEDIUM

Key Information:

Vendor

Apache
Status
Apache Camel Salesforce
Vendor
CVE Published:
6 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-49099?

The Apache Camel Salesforce Component is susceptible to an authorization bypass due to improper handling of special elements in output. This vulnerability allows an attacker to manipulate SOQL queries, SOSL searches, and other Salesforce operations by controlling the HTTP headers that are passed through the integration route. By crafting a malicious request, an unauthorized user could exploit this issue to override intended operations and execute unauthorized commands with the full permissions of the Salesforce integration user. To mitigate this risk, users should upgrade to the specified versions and implement best practices for handling sensitive operations within their integrations.

Affected Version(s)

Apache Camel Salesforce 4.0.0 < 4.14.8

Apache Camel Salesforce 4.15.0 < 4.18.3

Apache Camel Salesforce 4.19.0 < 4.21.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-49099
Created by oscerd

References

https://camel.apache.org/security/CVE-2026-49099.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yu Bao from PayPal
Andrea Cosentino
.