Improper Authentication Vulnerability in Apache Camel OAuth Component
CVE-2026-80312

8.2HIGH

Key Information:

Vendor: Apache
Status: Apache Camel
Vendor: CVE Published:; 19 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-80312?

An improper authentication vulnerability exists within the Apache Camel OAuth component. This flaw allows unauthenticated users to bypass security controls and access restricted routes, as the authentication failure does not terminate the request process. Instead of stopping the exchange, the system erroneously permits the request to proceed to the intended endpoint. To address this issue, users should upgrade to Apache Camel version 4.23.0 or later. For users on the 4.18.x and 4.22.x LTS release streams, upgrades to versions 4.18.5 and 4.22.1 are recommended, respectively. These updates ensure that authentication failures are correctly handled by halting the exchange and returning appropriate error messages.

Affected Version(s)

Apache Camel 4.11.0 < 4.18.5

Apache Camel 4.19.0 < 4.22.1

Apache Camel 4.18.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-80312
Created by oscerd