CVE-2025-66169: Apache Camel: Cypher injection vulnerability in Camel-Neo4j component

[Andrea Cosentino <acosentino () apache org>]

Severity: moderate 

Affected versions:

- Apache Camel (org.apache.camel:camel-neo4j) 4.10.0 before 4.10.8
- Apache Camel (org.apache.camel:camel-neo4j) 4.14.0 before 4.14.3
- Apache Camel (org.apache.camel:camel-neo4j) 4.15.0 before 4.17.0

Description:

Cypher Injection vulnerability in Apache Camel camel-neo4j component.

This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0

Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

This issue is being tracked as CAMEL-22719 

Credit:

Ya0H4cker (finder)

References:

https://camel.apache.org/security/CVE-2025-66169.html
https://camel.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-66169
https://issues.apache.org/jira/browse/CAMEL-22719