The advisory covers two security vulnerabilities affecting components used in HawtIO 4.3.0 for the Red Hat build of Apache Camel 4. The first vulnerability (CVE-2025-41248) is an authorization bypass in spring-security-core, classified under CWE-289 (Improper Authorization). The second (CVE-2025-41249) is an annotation detection vulnerability in spring-core, related to CWE-863 (Incorrect Authorization). The advisory does not provide explicit patch information but references prior errata and directs users to Red Hat's update procedures. The vulnerabilities are rated as important by Red Hat Product Security.

The vulnerabilities could allow unauthorized access or bypass of security controls due to improper authorization mechanisms in spring-security-core and spring-core components. This may compromise the security posture of applications using these components within the Red Hat build of Apache Camel 4 and HawtIO 4.3.0. No known exploits in the wild have been reported at this time.

The vendor advisory does not specify a new patch for these vulnerabilities but instructs users to ensure all previously released errata relevant to their system have been applied. Users should follow Red Hat's official update procedures as detailed in https://access.redhat.com/articles/11258. Monitoring Red Hat's security advisories for any future updates or patches is recommended.