Authorization bypass through user-controlled key in Apache Camel - CVE-2026-49099
Published: August 24, 2026
Vulnerability details
The vulnerability allows a remote attacker to inject SOQL or SOSL queries, override the target sObject, and redirect Apex REST calls.
The vulnerability exists due to improper neutralization of special elements in output used by a downstream component and authorization bypass through user-controlled key in the camel-salesforce producer when processing inbound HTTP headers bridged into Exchange headers. A remote attacker can send a specially crafted HTTP request with non-Camel-prefixed Salesforce control headers to inject SOQL or SOSL queries, override the target sObject, and redirect Apex REST calls.
Exploitation is possible in routes that bridge an HTTP consumer into a salesforce: producer, and all resulting operations run with the permissions of the connected Salesforce user.