CVE-2025-66169 — Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component

Description (CNA)

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Camel Neo4j	affected 4.10.0 before 4.10.8; affected 4.14.0 before 4.14.3; affected 4.15.0 before 4.17.0

CWE

No CWE identifiers supplied.

References

https://camel.apache.org/security/CVE-2025-66169.html

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/01/13/5

CISA-ADP

No English description supplied.

No references supplied.