← CVE Intelligence

CVE-2026-46588

Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.14.8, 4.18.3, 4.21.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Camelaffected 0 through 4.14.7; affected 4.15.0 through 4.18.2; affected 4.19.0 through 4.20.0

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.