Deserialization in Apache Software Foundation Camel
CVE-2026-46590
Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManag…
Vulnerability class: Insecure Deserialization
Affected products
- Apache Software Foundation Camel — versions 4.18.0, 4.19.0
Weakness classification (CWE)
References
- security@apache.org (vendor-advisory)