Vulnerability in Apache Camel
CVE-2025-27636
Bypass/Injection vulnerability in Apache Camel components under particular conditions. This issue affects Apache Camel: from 4.10.0 through <= 4.10.1, from 4.8.0 through <= 4.8.4, from 3.10.0 through <= 3.22.3. Users are recommended to u…
EPSS: 0.798 (99.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.6 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Apache Camel
- Apache Software Foundation Camel — versions 4.10.0, 4.8.0, 3.10.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@apache.org (vendor-advisory, Mailing List, Vendor Advisory)
- security@apache.org (issue-tracking, Patch, Issue Tracking)
- security@apache.org (vendor-advisory, Vendor Advisory)
- af854a3a-2127-422b-91ae-364da2661108 (Mailing List, Third Party Advisory)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Exploit)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Product)
Frequently asked questions
- What is CVE-2025-27636?
- CVE-2025-27636 is a medium-severity vulnerability in Apache Camel, classified under Improper Handling of Case Sensitivity. CVSS score: 5.6/10. Published 2025-03-09.
- How severe is CVE-2025-27636?
- Medium severity. CVSS v3 base score is 5.6 out of 10.
- Is CVE-2025-27636 known to be exploited?
- 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.