Vulnerability in Red Hat Build Of Apache Camel For Spring Boot 4
CVE-2026-91920
A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allowing a specifically crafted 15-digit chunk size to bypass the limit and overflow into internal state flags. This can cause the server to terminate a request body prematurely and interpret the remaining data as a separate, smuggled request.
Vulnerability class: HTTP Request Smuggling
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- access.redhat.com/security/cve/CVE-2026-91920 (vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (issue-tracking)
Frequently asked questions
- What is CVE-2026-91920?
- CVE-2026-91920 is a medium-severity vulnerability in Red Hat Build Of Apache Camel For Spring Boot 4, classified under Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling). CVSS score: 6.5/10. Published 2026-10-30.
- How severe is CVE-2026-91920?
- Medium severity. CVSS v3 base score is 6.5 out of 10.