Apache Camel-Langchain4j-Tools: Tool argument headers are not filtered against declared parameters

Improper Input Validation vulnerability in Apache Camel.

This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0.

Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-49042

• https://camel.apache.org/security/CVE-2026-49042.html

• http://www.openwall.com/lists/oss-security/2026/07/06/17

• apache/camel#23535

• apache/camel#23551

• apache/camel@5d0028f

• apache/camel@6851a94

• apache/camel@e9c4541

• https://github.com/apache/camel/releases/tag/camel-4.18.3

• https://github.com/apache/camel/releases/tag/camel-4.21.0

• https://issues.apache.org/jira/browse/CAMEL-23621