As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-88900: Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
Apache Camel's Camel-JGroups component contains an unsafe Java deserialization vulnerability in the JGroups consumer that allows remote code execution. The vulnerability affects versions 4.0.0 through 4.18.4 and 4.19.0 through 4.22.0. Patches are available in versions 4.18.5 and 4.22.1.
Why it matters: Organizations running Apache Camel with the Camel-JGroups component should immediately upgrade to patch versions to prevent remote code execution through cluster message deserialization.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-88900: Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
Apache Camel's JGroups component contains an unsafe Java deserialization vulnerability in cluster message handling that permits remote code execution. The flaw affects versions 4.0.0 through 4.18.4 and 4.19.0 through 4.22.0, with patched versions available in 4.18.5 and 4.22.1.
Why it matters: Organizations running Apache Camel with JGroups clustering enabled must upgrade immediately, as attackers on the local network can achieve remote code execution without authentication.
- Source published
- First seen by Cybersecurity Tracker