CVE-2026-91085

A flaw was found in Apache Karaf. This vulnerability allows privilege escalation because the command access control list ACL mechanism permits unmatched commands by default, and no restriction is defined for the configuration installation command. An authenticated user with low privileges can...