Critical Apache Camel Karavan Vulnerabilities Threaten Servers

Two high-severity (CVSSv3 8.8) vulnerabilities were disclosed in Apache Camel Karavan that allow authenticated attackers to apply unvalidated Kubernetes resources (leading to malicious pods with host networking or elevated privileges) and perform path traversal via the project file API to overwrite classpath files and execute arbitrary code; users should upgrade to 4.22.1 immediately—no active exploitation has been confirmed.