Executive brief
Apache Camel is an open-source integration framework that connects applications and data sources. The Langchain4j integration component fails to validate tool argument headers against declared parameters, allowing attackers to inject unexpected headers into tool invocations. This could enable attackers to bypass security controls, manipulate tool behavior, or access unintended functionality without any authentication requirements.
Technical details
This vulnerability is an improper input validation flaw (CWE-20) in Apache Camel's Langchain4j integration components. The tool argument processing code fails to filter or validate HTTP headers against the set of parameters explicitly declared in tool definitions. An attacker can craft requests containing arbitrary headers that are passed through to tool invocations without validation. Since the vulnerability requires only network access with no authentication or user interaction, an unauthenticated attacker can exploit this remotely to inject malicious headers, potentially causing tool functions to execute with unintended parameters, bypass authorization checks, or access protected resources. Patches are available in Apache Camel versions 4.18.3 and 4.21.0.
Affected products
- Apache Camel Langchain4j-Tools 4.8.0 through 4.18.2, 4.19.0 through 4.20.0
- Apache Camel Langchain4j-Agent 4.8.0 through 4.18.2, 4.19.0 through 4.20.0
- Apache Camel Spring-AI-Tools 4.8.0 through 4.18.2, 4.19.0 through 4.20.0
Timeline
- 2026-07-06: disclosed: Vulnerability published by GitHub Advisory Database and NVD
- 2026-07-06: patched: Patches released in Apache Camel 4.18.3 and 4.21.0