Medium severity5.3OSV Advisory· Published Jan 14, 2026· Updated Jun 17, 2026
CVE-2025-66169
CVE-2025-66169
Description
Cypher Injection vulnerability in Apache Camel camel-neo4j component.
This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0
Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.camel:camel-neo4jMaven | >= 4.10.0, < 4.10.8 | 4.10.8 |
org.apache.camel:camel-neo4jMaven | >= 4.14.0, < 4.14.3 | 4.14.3 |
org.apache.camel:camel-neo4jMaven | >= 4.15.0, < 4.17.0 | 4.17.0 |
Affected products
3Patches
Vulnerability mechanics
References
11- www.openwall.com/lists/oss-security/2026/01/13/5nvdMailing ListThird Party AdvisoryWEB
- camel.apache.org/security/CVE-2025-66169.htmlnvdIssue TrackingMailing ListVendor AdvisoryWEB
- github.com/advisories/GHSA-4jrw-64vr-7g8mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-66169ghsaADVISORY
- github.com/apache/camel/commit/66715d3feb4ba15df30cffe437e45efeedfba10dghsaWEB
- github.com/apache/camel/commit/723e2cd98ce4b4ceb1dd38837bc113fca0cef170ghsaWEB
- github.com/apache/camel/commit/e46c4c0ef542a64dc791253763a8273dfd7fb179ghsaWEB
- github.com/apache/camel/pull/20035ghsaWEB
- github.com/apache/camel/pull/20036ghsaWEB
- github.com/apache/camel/pull/20037ghsaWEB
- issues.apache.org/jira/browse/CAMEL-22719ghsaWEB
News mentions
0No linked articles in our index yet.