# CVE-2026-90885: Apache Camel Saxon component XXE in XQuery evaluation

Source: https://junglewise.ai/threats/cve-2026-90885-improper-restriction-of-xml-external-entity-reference  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-26. Updated: 2026-10-26  
License: CC BY 4.0 with a link back

CVE-2026-90885 · Severity: high · CVSS 7.5 · Published 2026-10-26

Apache Camel's XQuery processing component is vulnerable to XML external entity (XXE) attacks when evaluating expressions over certain message body types. An attacker who sends crafted XML with external entity declarations can force the Camel process to read local files and make outbound requests to arbitrary hosts, potentially exposing sensitive data or enabling lateral movement.

Technologies: [Apache Camel](https://junglewise.ai/threats/technologies/camel). Vendors: [Apache](https://junglewise.ai/threats/vendors/apache).

## Quick answers

**Is CVE-2026-90885 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-90885 being exploited in the wild.

**How severe is CVE-2026-90885?** High severity, with a CVSS score of 7.5, published 26 October 2026.

**Which products and versions are affected?** Apache Camel 4.0.0 before 4.18.5, 4.19.0 before 4.22.2, 4.14.x and earlier, 4.15.x to 4.17.x, 4.19.x to 4.21.x.

**Is there a fix for CVE-2026-90885?** Yes: fixed in 4.23.0, 4.22.2, 4.18.5. Until then: Do not evaluate XQuery over a message body that is already a javax.xml.transform.Source when that body carries XML from an untrusted sender. Alternatively, set the xquery endpoint or language configuration to use a Saxon Configuration with parse options that refuse DOCTYPE declarations and disable external entities and external DTD loading. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-90885 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-90885?** Check whether you run Apache Camel at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 4.23.0, 4.22.2, 4.18.5

Do not evaluate XQuery over a message body that is already a javax.xml.transform.Source when that body carries XML from an untrusted sender. Alternatively, set the xquery endpoint or language configuration to use a Saxon Configuration with parse options that refuse DOCTYPE declarations and disable external entities and external DTD loading.

## Technical details

The XQueryBuilder in camel-saxon creates a default Saxon Configuration that does not disable external entity resolution. When a message body is already a stream-based javax.xml.transform.Source (rather than String, byte[], or InputStream), it bypasses Camel's own XML type converters which normally protect against XXE. An attacker-controlled XML document with a DOCTYPE declaration and external entity references will be resolved and expanded during XQuery expression evaluation, allowing file disclosure or SSRF attacks.

## Affected products

- Apache Camel 4.0.0 before 4.18.5, 4.19.0 before 4.22.2, 4.14.x and earlier, 4.15.x to 4.17.x, 4.19.x to 4.21.x

## Timeline

- 2026-10-26: disclosed

## Related threats

- [Apache Camel SSRF in A2A webhook validator](https://junglewise.ai/threats/cve-2026-71569-server-side-request-forgery-ssrf-vulnerability-in-apache-camel)
- [Apache Camel OAuth component cache containing sensitive information](https://junglewise.ai/threats/cve-2026-94386-use-of-cache-containing-sensitive-information-vulnerability-in)
- [Apache Camel AWS2-S3 expression language injection in key handling](https://junglewise.ai/threats/cve-2026-95664-improper-neutralization-of-special-elements-used-in-an-expression)
- [Apache Camel Keycloak security policy token expiration bypass](https://junglewise.ai/threats/cve-2026-95663-insufficient-session-expiration-vulnerability-in-apache-camel)
- [Apache Camel Docling path traversal in output directory](https://junglewise.ai/threats/cve-2026-95629-improper-limitation-of-a-pathname-to-a-restricted-directory-path)