{"uuid": "c34297f7-e4a6-4857-8726-c3d239befc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49042", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr35zdtatc2j", "content": "Apache Camel's AI tool connectors trust a model's reply as control data.\n\nA prompt injection can set hidden internal headers and push a route toward code execution or SSRF.\n\nFix: update to 4.21.0 or 4.18.3. (CVE-2026-49042)", "creation_timestamp": "2026-07-20T11:13:27.387899Z"}