{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/camel-crypto-pgp-4.0.0-to--4.18.5-4.19.0-to--4.22.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":5.9,"id":"CVE-2026-85243"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["camel-crypto-pgp (4.0.0 to \u003c 4.18.5, 4.19.0 to \u003c 4.22.1)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","apache-camel","cryptography"],"_cs_type":"advisory","_cs_vendors":["Apache"],"content_html":"\u003cp\u003eApache Camel’s \u003ccode\u003ecamel-crypto-pgp\u003c/code\u003e component is vulnerable to an integrity-verification downgrade (CVE-2026-85243). The \u003ccode\u003eunmarshal()\u003c/code\u003e process only enforces modification detection checks when messages use OpenPGP symmetrically encrypted integrity-protected data packets. Messages utilizing older symmetrically encrypted data packets skip this integrity check entirely. Because the packet type is determined by the message producer, an attacker or a man-in-the-middle can choose to send legacy packets to bypass integrity validation. This allows the decryption of malleable ciphertext that would otherwise be rejected, potentially leading to unauthorized data processing. This issue affects versions from 4.0.0 before 4.18.5, and 4.19.0 before 4.22.1. The fix introduces a \u003ccode\u003erequireIntegrityProtection\u003c/code\u003e option, which defaults to \u003ccode\u003etrue\u003c/code\u003e and enforces the use of protected packets.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the decryption of unauthenticated and potentially modified PGP-encrypted messages. This impact is significant in environments relying on Camel for secure data ingestion, as it circumvents the fundamental guarantee that decrypted content has not been tampered with in transit. Organizations across sectors utilizing Apache Camel for PGP data processing are at risk if they communicate with untrusted or compromised external entities that can influence message packet selection.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Apache Camel to versions 4.18.5, 4.22.1, or 4.23.0 to leverage the new \u003ccode\u003erequireIntegrityProtection\u003c/code\u003e security option.\u003c/li\u003e\n\u003cli\u003eIf immediate patching is not possible, implement a pre-processing check to inspect incoming OpenPGP packet headers and reject any message that does not utilize the integrity-protected data packet format before it reaches the \u003ccode\u003eunmarshal()\u003c/code\u003e function.\u003c/li\u003e\n\u003cli\u003eReview existing Camel routes using \u003ccode\u003ecamel-crypto-pgp\u003c/code\u003e to ensure that \u003ccode\u003erequireIntegrityProtection\u003c/code\u003e is set to \u003ccode\u003etrue\u003c/code\u003e and evaluate if incoming traffic can be limited to trusted sources that strictly use modern PGP packet types.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-19T12:17:20Z","date_published":"2026-10-19T12:17:20Z","id":"https://feed.craftedsignal.io/briefs/2026-10-camel-pgp-integrity/","summary":"An integrity-verification downgrade in camel-crypto-pgp allows attackers to bypass modification detection by using legacy OpenPGP packets, potentially leading to the acceptance and decryption of malleable ciphertext.","title":"Integrity-Verification Downgrade Vulnerability in Apache Camel PGP","url":"https://feed.craftedsignal.io/briefs/2026-10-camel-pgp-integrity/"}],"language":"en","title":"CraftedSignal Threat Feed - Camel-Crypto-Pgp (4.0.0 to \u003c 4.18.5, 4.19.0 to \u003c 4.22.1)","version":"https://jsonfeed.org/version/1.1"}