THREAT OPS › Threat News › CVE-2026-80354: Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace
CVE-2026-80354: Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace
<p>Posted by Pasquale Congiusti on Sep 10</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Camel K (apache/camel-k) 2.0.0 before 2.9.3<br /> - Apache Camel K (apache/camel-k) 2.10.1 before 2.10.2<br /> <br /> Description:<br /> <br /> Authorization bypass through User-Controlled key vulnerability in Apache Camel K.<br /> <br /> An authorization vulnerability in custom r
Indicators of compromise
- CVE-2026-80354cve
Original source: https://seclists.org/oss-sec/2026/q3/709