Authorization Bypass Vulnerability in Apache Camel K
CVE-2026-80354

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Camel K
Vendor
CVE Published:
10 September 2026

What is CVE-2026-80354?

An authorization vulnerability in Apache Camel K allows unauthorized tenants to access sensitive secrets by referencing them directly in the operator namespace. This potential exposure can lead to unauthorized access to secrets used by other tenants or operator components. The affected versions need to be updated to versions 2.9.3, 2.10.2, or 2.11.0 to mitigate this risk.

Affected Version(s)

Apache Camel K 2.0.0 < 2.9.3

Apache Camel K 2.10.1 < 2.10.2

References

https://camel.apache.org/security/CVE-2026-80354.html
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.