What is CVE-2025-66169?

CVE-2025-66169 is a medium-severity vulnerability in Apache Camel, classified under SQL Injection. CVSS score: 5.3/10. Published 2026-01-14.

How severe is CVE-2025-66169?

Medium severity. CVSS v3 base score is 5.3 out of 10.

SQL Injection in Apache Camel

CVE-2025-66169

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for…

Vulnerability class: SQL Injection

EPSS: 0.006 (44.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Apache Camel
Apache Software Foundation Camel Neo4j — versions 4.10.0, 4.14.0, 4.15.0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security@apache.org (vendor-advisory, Mailing List, Issue Tracking, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108 (Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2025-66169?: CVE-2025-66169 is a medium-severity vulnerability in Apache Camel, classified under SQL Injection. CVSS score: 5.3/10. Published 2026-01-14.
How severe is CVE-2025-66169?: Medium severity. CVSS v3 base score is 5.3 out of 10.