CVE-2026-85243

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0

Description Improper validation of the integrity check value in the Crypto PGP component occurs because the unmarshal() function only verified modification detection code for OpenPGP symmetrically encrypted integrity protected data packets. Older symmetrically encrypted data packets lack this code, and since OpenPGP's CFB mode is malleable without it, messages using these packets bypassed the integrity check. Because the sender determines the packet type, an attacker could rewrite messages in transit to avoid the check. Previously, the integrity option only applied to marshalling and lacked a decryption-side equivalent, preventing deployments from enforcing integrity protection on accepted messages.

Recommendations Upgrade to version 4.23.0. Upgrade to version 4.18.5 for those on the 4.18.x LTS stream. Upgrade to version 4.22.1 for those on the 4.22.x LTS stream. As a temporary workaround, reject messages that do not use the integrity protected packet before they reach the data format. For routes requiring interoperability with senders using legacy packets, set requireIntegrityProtection=false after upgrading and treat decrypted content as unauthenticated.