CVE-2026-49042

Published Jul 6, 2026·Updated Jul 6, 2026

NVD Description

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue.

Public Exploits & PoCs1 found

PoC: CVE-2026-49042

PoC reproducer for CVE-2026-49042 (Apache Camel camel-langchain4j-tools): a prompt-injected LLM's tool-call arguments become unfiltered Exchange headers, hijacking the tool route's exec: sink for RCE. Fixed in 4.14.8/4.18.3/4.21.0.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free