CVE-2026-23552

⛔ critical

Summary

Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm is silently accepted by a policy configured for a completely different realm, breaking tenant isolation. This issue affects Apache Camel: from 4.15.0 before 4.18.0. Users are recommended to upgrade to version 4.18.0, which fixes the issue

Description

Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component.

The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm is silently accepted by a policy configured for a completely different realm, breaking tenant isolation.
This issue affects Apache Camel: from 4.15.0 before 4.18.0.

Users are recommended to upgrade to version 4.18.0, which fixes the issue.

CVSS Score

9.1

Critical

EPSS Score

0.0

Exploit Probability

Published Date

2026-02-23

First Seen: 2026-02-24

📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 87.7% of all 330,193 vulnerabilities in our database.

#40,600

Top 25% most severe

Severity Percentile

🎯 CISA SSVC Assessment Updated: Feb 23, 2026

🔍 Exploitation Status

Poc

Proof-of-concept available

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Andrea Cosentino Andrea Cosentino (remediation developer)

SSVC data provided by CISA

Last Modified 2026-02-26

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE IDs (Weakness Types)

CWE-346

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-47323	⛔ critical	9.8	0.1	Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStra...	2026-05-19
CVE-2026-25747	⚠️ high	8.8	0.1	Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSeri...	2026-02-23
CVE-2025-66169	🔶 medium	5.3	0.2	Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 befo...	2026-01-14
CVE-2025-30177	🔶 medium	6.5	0.6	Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions. This issue affe...	2025-04-01
CVE-2025-29891	🔶 medium	4.8	0.2	Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 ...	2025-03-12
CVE-2025-27636	🔶 medium	5.6	28.4	Bypass/Injection vulnerability in Apache Camel components under particular conditions. This issue affects Apache Camel:...	2025-03-09

CVE-2026-23552

Summary

Description

📊 Relative Risk Intelligence

🎯 CISA SSVC Assessment Updated: Feb 23, 2026

📦 Affected Products 1

🔗 References 3

🔗 Related CVEs 6