High [CVE-2026-63621] Header injection vulnerability allows server-side request forgery
This high-severity Red Hat Linux advisory covers CVE-2026-63621 affecting Red Hat build of Apache Camel 4.18.4 for Spring Boot 3.5.16, OpenShift Serverless.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers.
In binary content mode the HTTP-header path filters Camel-internal headers through KnativeHttpHeaderFilterStrategy, but in structured content mode (Content-Type application/cloudevents+json) the CloudEvent extension fields are read directly from the JSON body and every extension key is copied into the Exchange headers without applying any HeaderFilterStrategy (CloudEventProcessors, spec versions 1.0, 1.0.1 and 1.0.2).
As a result, an unauthenticated attacker can inject Camel-internal headers (e.g. CamelHttpUri, CamelHttpPath, CamelFileName) via a structured-mode CloudEvent request, matched case-insensitively against Camel's header map.
When a route forwards messages from a Knative consumer to a header-driven component such as camel-http or camel-file, the injected headers override configured values, enabling server-side request forgery (SSRF), path traversal or message-dispatch redirection depending on the route.
Affected products named by the advisory: Red Hat build of Apache Camel 4.18.4 for Spring Boot 3.5.16; OpenShift Serverless.
- < 3.15.0
- < 4.14.9
- < 4.15.0
- < 4.18.4
- < 4.19.0
- < 4.21.0
- 1.0.1
- 1.0.2
- 4.17.0
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
- 4.22.0
- 4.18
- 4.18.4
- 4.14
- 4.14.9
- camel-knative
- RHSA-2026:71675
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Mitigation checklist
- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.