CVE Feed

    Dashboard / CVE / CVE-2025-26467

    CVE-2025-26467

    Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches. This issue affects Apache Cassandra 3.0.30, 3.11.17, 4.0.16, 4.1.7, 5.0.2, but this advisory is only for 4.0.16 because the fix to CVE-2025-23015 was incorrectly applied to 4.0.16, so that version is still affected. Users in the 4.0 series are recommended to upgrade to version 4.0.17 which fixes the issue. Users from 3.0, 3.11, 4.1 and 5.0 series should follow recommendation from CVE-2025-23015.

    Published:Aug 25, 2025
    Last Modified:Feb 26, 2026
    EPS:Aug 25, 2025
    EPSS Score:0.00062
    CVSS Score:8.8

    Affected Products

    Vendor
    Apache
    Product
    Cassandra

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-32588 (CVSS 6.5) — Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencie…
    CVE-2026-27315 (CVSS 5.5) — Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passw…
    CVE-2026-27314 (CVSS 8.8) — Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user…
    CVE-2024-27137 (CVSS 5.3) — In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or con…
    CVE-2025-24860 (CVSS 5.4) — Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR gro…
    CVE-2025-23015 (CVSS 8.8) — Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL…
    CVE-2023-30601 (CVSS 7.8) — Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the…
    CVE-2021-44521 (CVSS 9.1) — When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scr…
    CVE-2020-17516 (CVSS 7.5) — Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using …
    CVE-2020-13946 (CVSS 5.9) — In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High