CVE-2018-14649

CVE-2018-14649 describes a critical vulnerability in the ceph-isci-cli package within Red Hat Ceph Storage 2 and 3, affecting Red Hat Enterprise Linux distributions. The vulnerability stems from the python-werkzeug library running in debug shell mode with root privileges, allowing unauthenticated attackers to execute arbitrary commands remotely. With a CVSS score of 9.8 (CRITICAL), this flaw presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the high EPSS and FAUCET Risk Score indicate a significant potential for future exploitation.