Search: CVE-2026-80343

CVE-2026-80343 is a high-severity vulnerability in Apache Camel's Netty HTTP component affecting versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1. The issue arises from inconsistent case sensitivity handling between the security constraint and request routing, allowing an attacker to bypass security constraints by altering the case of characters in the request path. This bypass enables access to protected routes without credentials or special configuration. Fixed versions are 4.18.5 and 4.22.1, which align case sensitivity rules between the constraint and routing. Until upgrading, users should place authorization checks before the Camel consumer, such as in a reverse proxy that normalizes request paths.