Authorization bypass through user-controlled key in Apache Camel - CVE-2026-48206

Vulnerability details

The vulnerability allows a remote attacker to perform arbitrary JIRA issue operations using the endpoint's configured credentials.

The vulnerability exists due to authorization bypass through user-controlled key and improper input validation in the Camel JIRA component header handling when bridging an inbound HTTP request to a jira producer. A remote attacker can send specially crafted HTTP headers to perform arbitrary JIRA issue operations using the endpoint's configured credentials.

The issue occurs because non-Camel-prefixed Exchange header constants can pass through the HTTP header filter and override route-intended JIRA operation parameters. Exploitation is possible when an HTTP consumer is bridged to a jira producer, and no credentials are required if the bridging consumer is unauthenticated.

Affected software

How to mitigate CVE-2026-48206

External References

• https://lists.apache.org/api/email.lua?id=y81r3vt08ll1gh7sw5d7jfxo002p45bj
• https://camel.apache.org/security/CVE-2026-48206.html

Related Security Bulletins

• Multiple vulnerabilities in Apache Camel