CVE-2026-45760

Name of the Vulnerable Software and Affected Versions Apache Camel K versions 2.0.0 through 2.8.0 Apache Camel K versions 2.9.0 through 2.9.1 Apache Camel K versions 2.10.0

Description Authorized users in a Kubernetes namespace can create a Build resource to control Pod generation in a namespace of their choice, including the operator namespace. This cross-namespace flaw allows users to hijack pods in secure namespaces through an externally controlled reference to a resource in another sphere and authorization bypass via a user-controlled key.

Recommendations Update versions 2.0.0 through 2.8.0 to 2.8.1. Update versions 2.9.0 through 2.9.1 to 2.9.2. Update version 2.10.0 to 2.10.1.