Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-66169

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

VectorNETWORK

PublishedJan 14, 2026, 12:16

Published Bysecurity@apache.org

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.apache.camel:camel-neo4j(Maven)4.10.04.10.8N/A

org.apache.camel:camel-neo4j(Maven)4.14.04.14.3N/A

org.apache.camel:camel-neo4j(Maven)4.15.04.17.0N/A

References

https://camel.apache.org/security/CVE-2025-66169.html
http://www.openwall.com/lists/oss-security/2026/01/13/5

Weakness Type

CWE-89

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK