SB20260407105 - Multiple vulnerabilities in Apache Cassandra

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260407105

SB20260407105 - Multiple vulnerabilities in Apache Cassandra

Published: April 7, 2026

Security Bulletin ID SB20260407105
Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Improper access control (CVE-ID: CVE-2026-27314)

The vulnerability allows a remote user to escalate privileges.

The vulnerability exists due to improper access control in ADD IDENTITY authorization handling when associating a certificate identity with an arbitrary role in an mTLS environment using MutualTlsAuthenticator. A remote user can associate their own certificate identity with an arbitrary role to escalate privileges.

Exploitation requires an mTLS environment using MutualTlsAuthenticator and CREATE permission.


2) Resource exhaustion (CVE-ID: CVE-2026-32588)

The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to resource consumption in ALTER ROLE password hashing when processing repeated password change requests over CQL. A remote user can issue repeated password change requests to cause a denial of service.


3) Cleartext storage of sensitive information (CVE-ID: CVE-2026-27315)

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to improper handling of sensitive information in the cqlsh history file when saving previously executed cqlsh commands. A local user can read the local ~/.cassandra/cqlsh_history file to disclose sensitive information.

Passwords used in commands such as login or user creation may be stored in cleartext in the history file.


Remediation

Install update from vendor's website.

References