CVE-2026-49042
Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters
HIGH 7.3EPSS 0.7%
Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue.
- Affected
- Apache Software Foundation · Apache Camel
- CVSS v3.1 CNA
- 7.3 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - EPSS
- 0.69% chance of exploitation in the next 30 days, 52nd percentile
- Published
- 2026-07-06
Proof-of-concept exploits (1)
- oscerd/CVE-2026-490421★ · 2026-07-24
Security advisories
- https://camel.apache.org/security/CVE-2026-49042.html
- http://www.openwall.com/lists/oss-security/2026/07/06/17
- advisories/GHSA-hh8r-75r6-qrg9