Exploit for CVE-2026-49042

cve · 2026-07-06

Description

CVE-2026-49042 Apache Camel improper input validation; upgrade to 4.18.3 or 4.21.0.

Entry point

ParameterCamelExecCommandExecutable · header

Path/chat

Prompt-injected tool-call arguments can be promoted to Camel headers, enabling control over downstream components (e.g., RCE/SSRF/file writes).

Affected Apache Camel versions

Apache Camel< 4.18.3, 4.21.0

All known vulnerabilities by product

Apache Camel

CVSS 7.3 for CVE-2026-49042

7.3

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:LOW

Integrity:LOW

Availability:LOW

EPSS Score

0.7%higher than 50.1% of all CVEs

Updated 2026-08-26

CVE Information

CVE-2026-49042

References

https://camel.apache.org/security/CVE-2026-49042.html

http://www.openwall.com/lists/oss-security/2026/07/06/17

Exploit Details

Modified:2026-07-08 14:38

Last Seen:2026-08-24 01:56

Reporter:apache

Other exploits for CVE-2026-49042

CVE-2026-49042

2026-08-25 KitPloitKITPLOIT

CVE-2026-49042 — Updated!

2026-07-31 KitPloitKITPLOIT

Exploit for Improper Input Validation in Apache Camel

2026-07-20 oscerdGITHUB

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=CVE-2026-49042
Improper Input Validation vulnerability in Apache Camel.

This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0.

Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue.

Exploit Code

Share

Share on social media: