Apache Camel K
- Software type
- Orchestration platform
- Total vulnerabilities (90 days)
- 3
en
As of 11/13/2026, Apache Camel K recorded 3 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Apache Camel K and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-80354Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespaceCVE-2026-80352Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objectsCVE-2026-80351Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator podCVE-2026-45760Apache Camel K: Camel K Cross-Namespace Build Deputy Attack| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-80354Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-80352Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityCritical |
CVE-2026-80351Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityCritical |
CVE-2026-45760Apache Camel K: Camel K Cross-Namespace Build Deputy Attack | Exploitation statusNot exploited | FixYes | Published05/21/2026 | SeverityHigh |
4 Results | Page 1 of 1