As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-103413: Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml
Apache Camel Karavan versions before 4.22.1 contain an improper input validation vulnerability that allows authenticated users to apply arbitrary Kubernetes resources to a cluster by manipulating a project's kubernetes.yaml file. The flaw stems from Karavan unmarshalling and applying resources without restrictions on resource kinds or rejection of security-sensitive configurations.
Why it matters: Organizations running Camel Karavan 4.0.0 through 4.22.1 need to patch immediately, as authenticated users can deploy malicious or privileged pod configurations to gain cluster control and compromise containerized environments.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-103413: Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml
Apache Camel Karavan versions before 4.22.1 contain an improper input validation vulnerability that allows attackers to apply arbitrary Kubernetes resources to a cluster by modifying a project's kubernetes.yaml file. The flaw enables deployment of security-sensitive pod configurations without restriction or validation of resource kinds.
Why it matters: Users running Apache Camel Karavan 4.0.0 through 4.22.0 need to upgrade immediately, as authenticated attackers can escalate privileges or compromise cluster security by injecting malicious Kubernetes resources during deployment.
- Source published
- First seen by Cybersecurity Tracker