apache/cassandra Security Advisories | GitStock

high2026-04-07

CVE-2026-27314-Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

GHSA-qxpc-96fq-wwmg

medium2026-04-07

CVE-2026-27315-Apache Cassandra has sensitive Information Leak in cqlsh

GHSA-fh34-c629-p8xj

high2025-08-25

CVE-2025-26467-Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

GHSA-5c4f-pxmx-xcm4

high2025-02-04

CVE-2025-23015-Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions

GHSA-wmcc-9vch-jmx4

medium2025-02-04

CVE-2024-27137-Apache Cassandra: unrestricted deserialization of JMX authentication credentials

GHSA-rgfx-7p65-3ff4

medium2025-02-04

CVE-2025-24860-Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions

GHSA-3cjf-fwcq-xh22

high2023-07-06

CVE-2023-30601-Apache Cassandra: Privilege escalation when enabling FQL/Audit logs

GHSA-m9p2-j4hg-g373

critical2022-02-12

CVE-2021-44521-Apache Cassandra vulnerable to Code Injection due to unsafe configuration

GHSA-8ffc-79xg-29w8