Apr 1, 19:42 UTC
Resolved - This issue is now resolved.
Apr 1, 17:31 UTC
Monitoring - We have disabled the rule in question, and the rate of false positives is decreasing. We are monitoring.
Apr 1, 17:03 UTC
Identified - Cloudflare has identified an issue with the managed ruleset "Apache Camel - Remote Code Execution - CVE:CVE-2025-29891" which is potentially causing false positives. Customers can disable this rule by setting Action -> Log in the Cloudflare Dashboard. Other WAF rules are unaffected. We are currently working on a fix for this issue.
This is a companion discussion topic for the original entry at https://www.cloudflarestatus.com/incidents/gshczn1wxh74