EUVD-2026-75291
GHSA-x48w-5g24-c9q7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attacker must be a tenant (PR:L) supplying repo content over the network, and code executes with operator privileges across a security boundary, so S:C with full C/I/A impact.
Primary rating from Vendor (apache).
CVSS VectorVendor: apache
Lifecycle Timeline
6DescriptionCVE.org
Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K.
An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator pod, potentially enabling tenants to execute arbitrary code with the privileges of the operator.
This issue affects Apache Camel K: from 2.0.0 before 2.9.3, from 2.10.1 before 2.10.2.
Users are recommended to upgrade to version 2.9.3, 2.10.2 or 2.11.0, which fixes the issue.
Articles & Coverage 1
AnalysisAI
Cross-tenant remote code execution in Apache Camel K (2.0.0 before 2.9.3, and 2.10.1 before 2.10.2) arises from improper neutralization of directives in dynamically evaluated Maven configuration, letting a tenant supply repository content that is evaluated inside the operator pod. A tenant can thereby execute arbitrary code with the privileges of the shared Camel K operator, escaping their own tenancy. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a multi-tenant Apache Camel K deployment where a tenant can supply or influence Maven repository content that the operator dynamically evaluates during builds; the attacker must be an existing tenant (not an anonymous outsider), so exploitation is limited to environments that let tenants provide untrusted Maven repository/config content to a shared operator. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The published CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H = 9.8) treats this as fully unauthenticated network exploitation, but the description makes clear the attacker must be a tenant supplying repository content to a multi-tenant Camel K operator - i.e. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to Apache Camel K 2.9.3, 2.10.2, or 2.11.0, which fix the eval-injection flaw per the Apache advisory (https://camel.apache.org/security/CVE-2026-80351.html). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all Apache Camel K operators and determine which versions are running (vulnerable versions: 2.0.0-2.9.2, and 2.10.1). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Apache Camel K
View allCode injection in Apache Camel K (2.0.0-2.9.2 and 2.10.1) lets an authorized custom-resource author smuggle arbitrary Ku
Cross-tenant secret disclosure in Apache Camel K's custom resource resolution allows an authenticated tenant to referenc
Cross-namespace privilege escalation in Apache Camel K (2.0.0-2.8.0, 2.9.0-2.9.1, 2.10.0) lets an authenticated Kubernet
Same weakness CWE-95 – Eval Injection
View allShare
External POC / Exploit Code
Leaving vuln.today