CVE-2026-33454 - Vulnerability Analysis

Overview

Apache Camel from 3.0.0 before 4.14.6 and from 4.15.0 before 4.18.1 contains a message header injection caused by incomplete inbound header filtering in MailHeaderFilterStrategy, letting attackers injecting malicious Camel headers alter route behavior, exploit requires attacker to deliver email to monitored mailbox.

Severity & Score

Impact

Attackers can alter route behavior by injecting malicious headers, potentially disrupting or manipulating application workflows.

Mitigation

Upgrade to version 4.19.0, or 4.18.1 for 4.18.x LTS, or 4.14.6 for 4.14.x LTS.

References

• https://camel.apache.org/security/CVE-2026-33454.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner