Information disclosure in Apache Camel - CVE-2026-85251
Published: October 23, 2026
Vulnerability identifier: #VU157304
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-85251
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain OAuth2 bearer tokens or configured basic and digest authentication credentials.
The vulnerability exists due to improper credential scoping in the Apache Camel HTTP component when following redirects to another host. A remote attacker can control or influence an endpoint's responses and return a redirect to a host under their control to collect credentials, because the OAuth2 request interceptor reattaches bearer tokens on redirect hops and basic and digest credentials use an AuthScope matching any host.
Exploitation requires followRedirects=true on an endpoint carrying credentials.
Affected software
Apache Camel
How to mitigate CVE-2026-85251
Install security update from vendor's website.
Apache Camel - addressed in versions 4.18.5, 4.22.1