CVE-2025-66169: Apache Camel

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

Affected products

• Apache Camel: from 4.10.0, before 4.10.8 (fixed in 4.10.8); from 4.14.0, before 4.14.3 (fixed in 4.14.3); from 4.15.0, before 4.17.0 (fixed in 4.17.0)

Published 2026-01-14. Last modified 2026-06-17.