AIKIDO-2026-116262

TL;DR

Before the fix, the camel-mllp component logged protected health information from HL7 v2 messages: TcpSocketConsumerRunnable.run wrote each received message, partial payload, and out-of-band data through convertToPrintFriendlyString with no logPhi check, and logPhi defaulted to true, so PHI reached ordinary application logs even when an operator set logPhi=false on those paths. Any network peer that could open a TCP connection to the MLLP listener port supplied that content without authentication. HL7 v2 messages carry patient data, so anyone with access to those logs could read PHI. The fix defaults logPhi to false and routes every payload log statement through convertToLoggableString, which substitutes <PHI suppressed> when logPhi is disabled.