CVE-2025-66169

Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component

Medium · published January 14, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

Cypher Injection vulnerability in Apache Camel camel-neo4j component.

This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0

Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Published
2026-01-14T11:45Z
EPSS history
Timeline
  • 14 JAN 11:45Z
    Apache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j component
    cvelistv5