CVE-2026-23552

{"id": "CVE-2026-23552", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2026-02-23T09:17:00.857", "references": [{"url": "https://camel.apache.org/security/CVE-2026-23552.html", "tags": ["Vendor Advisory"], "source": "security@apache.org"}, {"url": "https://github.com/oscerd/CVE-2026-23552", "tags": ["Exploit", "Third Party Advisory"], "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2026/02/18/7", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-346"}]}], "descriptions": [{"lang": "en", "value": "Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component.\u00a0\n\nThe Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm is silently accepted by a policy configured for a completely different realm, breaking tenant isolation.\nThis issue affects Apache Camel: from 4.15.0 before 4.18.0.\n\nUsers are recommended to upgrade to version 4.18.0, which fixes the issue."}, {"lang": "es", "value": "Omisi\u00f3n de la aceptaci\u00f3n de tokens entre dominios (realms) en el componente KeycloakSecurityPolicy de Apache Camel Keycloak.\n\nLa pol\u00edtica de seguridad KeycloakSecurityPolicy de Camel-Keycloak no valida la declaraci\u00f3n 'iss' (emisor) de los tokens JWT contra el dominio (realm) configurado. Un token emitido por un dominio (realm) de Keycloak es aceptado silenciosamente por una pol\u00edtica configurada para un dominio (realm) completamente diferente, rompiendo el aislamiento de inquilinos.\nEste problema afecta a Apache Camel: desde la versi\u00f3n 4.15.0 hasta antes de la 4.18.0.\n\nSe recomienda a los usuarios actualizar a la versi\u00f3n 4.18.0, que corrige el problema."}], "lastModified": "2026-02-26T16:46:16.643", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E575766B-E717-45A6-BD34-2C004B8EA67F", "versionEndExcluding": "4.18.0", "versionStartIncluding": "4.15.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}