Product

Camel-Thrift (4.0.0-4.18.4, 4.19.0-4.22.0)

1 brief RSS

Cross-Exchange Data Disclosure in Apache Camel Thrift Component

A vulnerability in the camel-thrift component, CVE-2026-85245, allows cross-tenant data disclosure by reusing a shared object instance for unmarshalling Thrift payloads.

camel-thrift data-disclosure apache-camel cve-2026-85245

1c 7m ago