camel-infinispan CVE-2026-6857

Vendor-released patch status cannot be confirmed from available data; consult Red Hat Product Security advisory at https://access.redhat.com/security/cve/CVE-2026-6857 for update availability and exact fixed versions. Until patches are applied, implement these compensating controls: Disable or restrict access to ProtoStream remote aggregation repository features in camel-infinispan configurations if not operationally required (eliminates attack surface but may impact distributed aggregation capabilities). Enforce strict authentication and network segmentation to ensure only highly trusted users and systems can access Infinispan remote cache services (reduces PR:L to effective PR:H but requires infrastructure changes). Deploy input validation or allowlisting for serialized objects at network boundaries before they reach deserialization code (complex to implement correctly and may break legitimate remote cache operations). Monitor Infinispan and Camel logs for suspicious remote aggregation requests with unusual serialized payloads (detection-focused, does not prevent exploitation). Isolate affected middleware in network zones with strict egress filtering to limit post-exploitation lateral movement (containment strategy that reduces blast radius but does not prevent initial compromise).