CVE-2018-11786

CVE-2018-11786 describes a high-severity privilege escalation vulnerability in Apache Karaf versions prior to 4.2.0. If the Karaf sshd service is enabled, authenticated console users can read and write any file accessible by the Karaf process user, potentially leading to full compromise of the system. This vulnerability has a CVSS score of 8.8 (High) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.