CVE-2026-91048

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-91048

Apache Karaf is vulnerable to privilege escalation to remote code execution (RCE) due to missing authorization on the jdbc: i: and jms: i: shell command scopes. Because the SecuredSessionFactoryImpl command guard treats commands with no matching ACL rule as allowed, an authenticated shell session...

EUVD-2026-88661

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...