VULNERABILITY INTELLIGENCE

CVE-2026-85249

CVSS score6.5 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2026-10-19

Last modified2026-10-19

Description

Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Tika producer mapped every metadata key parsed out of the submitted document onto the Exchange as a header, with no filter applied. Docu…