VulnSocial

CVE-2026-45760Disclosure

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

(Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the operator namespace. This issue affects Apache Camel K: from 2.0.0 before 2.8.1, from 2.9.0 before 2.9.2, from 2.10.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1 (or 2.8.1 or 2.9.2), which fixes the issue.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-610CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-05-22); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-05-22: 1Mentions · 2026-05-23: 1Mentions · 2026-05-25: 1Mentions · 2026-06-08: 1Patch / Workaround · 2026-05-22: 1Technical Details · 2026-05-22: 1Technical Details · 2026-05-23: 1Technical Details · 2026-05-25: 105-2205-2305-2506-08
Signal classification3 categories
Disclosure
250.0%
Patch
125.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-221
Patch1
2026-05-231
Disclosure1
2026-05-251
Disclosure1
2026-06-081
General1
Full discourse4 posts
  • キタきつね@foxbook
    Disclosure

    Apache Camel Kの新たな脆弱性（CVE-2026-45760）により、名前空間を跨いだ攻撃が可能に New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks #DailyCyberSecurity (May 22) https://securityonline.info/apache-camel-k-cross-namespace-vulnerability-cve-2026-45760/

    Post summary

    The post announces a new Apache Camel K vulnerability (CVE-2026-45760) that allows attackers to perform cross‑namespace attacks, but provides no PoC, exploit tool, evidence of active exploitation, or patch information.

    00010276
    4.8K followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-45760 Apache Camel Kの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/05/cve-2026-45760-apache-camel-k/ #IT #Security #cybersecurity

    Post summary

    The text lists CVE‑2026‑45760 for Apache Camel K with a reference to an article, but it offers no PoC, exploit details, patch specifics, or technical breakdown within the snippet.

    0000042
    209 followersView on X
  • Open Source Security mailing list@oss_security
    Disclosure

    CVE-2026-45760: Apache Camel K: Camel K Cross-Namespace Build Deputy Attack https://www.openwall.com/lists/oss-security/2026/05/21/8 Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the operator namespace

    Post summary

    CVE‑2026‑45760 reveals that authorized users in a Kubernetes namespace can create Build resources that control Pod creation in any namespace, potentially enabling privilege escalation in Apache Camel K.

    00000167
    4.6K followersView on X
  • Gray Hats@the_yellow_fall
    Patch

    Apache Camel K fixes CVE-2026-45760, a critical cross-namespace "Build Deputy" flaw allowing authorized users to hijack pods in secure namespaces. #KubernetesSecurity #ApacheCamelK #CVE202645760 #CloudNative #K8s #MultiTenancy #VulnerabilityAlert https://securityonline.info/apache-camel-k-cross-namespace-vulnerability-cve-2026-45760/ https://t.co/DQIcsGDaql

    Post summary

    The tweet announces that Apache Camel K has released a fix for CVE-2026-45760, a critical cross-namespace flaw, and provides limited technical details about the vulnerability.

    00000297
    12.2K followersView on X

Explore more

Back to dashboard