VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 10, 2026· Updated Sep 14, 2026

CVE-2026-80352

CVE-2026-80352

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K.

A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges of the operator.

This issue affects Apache Camel K: from 2.0.0 before 2.9.3, from 2.10.1 before 2.10.2.

Users are recommended to upgrade to version 2.9.3, 2.10.2 or 2.11.0, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/Camel
    cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*
    Range: >=2.0.0,<2.9.3
  • Apache/Camel Kllm-fuzzy
    Range: from 2.0.0 before 2.9.3, from 2.10.1 before 2.10.2

Patches

Vulnerability mechanics

References

2

News mentions

1