Moderate severityOSV Advisory· Published Jan 14, 2026· Updated Jan 15, 2026
Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component
CVE-2025-66169
Description
Cypher Injection vulnerability in Apache Camel camel-neo4j component.
This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0
Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.camel:camel-neo4jMaven | >= 4.10.0, < 4.10.8 | 4.10.8 |
org.apache.camel:camel-neo4jMaven | >= 4.14.0, < 4.14.3 | 4.14.3 |
org.apache.camel:camel-neo4jMaven | >= 4.15.0, < 4.17.0 | 4.17.0 |
Affected products
2Patches
Vulnerability mechanics
References
11- camel.apache.org/security/CVE-2025-66169.htmlghsavendor-advisoryWEB
- github.com/advisories/GHSA-4jrw-64vr-7g8mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-66169ghsaADVISORY
- www.openwall.com/lists/oss-security/2026/01/13/5ghsaWEB
- github.com/apache/camel/commit/66715d3feb4ba15df30cffe437e45efeedfba10dghsaWEB
- github.com/apache/camel/commit/723e2cd98ce4b4ceb1dd38837bc113fca0cef170ghsaWEB
- github.com/apache/camel/commit/e46c4c0ef542a64dc791253763a8273dfd7fb179ghsaWEB
- github.com/apache/camel/pull/20035ghsaWEB
- github.com/apache/camel/pull/20036ghsaWEB
- github.com/apache/camel/pull/20037ghsaWEB
- issues.apache.org/jira/browse/CAMEL-22719ghsaWEB
News mentions
0No linked articles in our index yet.