CVE-2026-83531
Description
A flaw was found in Apache Camel's Dynamic Router component. An attacker able to send messages to a dynamic router control endpoint can achieve arbitrary code execution by submitting a specially crafted subscription message. The application compiles and evaluates user-supplied expressions without validation, allowing untrusted code to run with the privileges of the underlying application process.
Statement
This vulnerability is rated as Important severity because an authenticated or network-adjacent attacker can achieve remote code execution within the context of the running application if untrusted input reaches the dynamic routing control channel. In typical Red Hat integration deployments, exploiting this condition requires an architecture where dynamic-router-control endpoints ingest messages directly from exposed or shared transport channels. While the impact on system confidentiality, integrity, and availability is severe, standard architectures that isolate control traffic or do not expose dynamic router control endpoints externally significantly reduce the risk.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Application Data
An attacker could insert an expression that references private data, which is then included in the output.
Integrity
Technical Impact: Execute Unauthorized Code or Commands
An attacker could execute arbitrary expressions.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
