CVE-2025-23015 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions

🗓️ 04 Feb 2025 09:37:18Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Privilege escalation vulnerability in Apache Cassandra allows users to gain superuser access improperly.

Reporter	Title	Published	Views	Family All 41
ATTACKERKB	CVE-2025-26467	25 Aug 202514:06	–	attackerkb
BDU FSTEC	The vulnerability of the distributed database management system Apache Cassandra lies in its insecure handling of privileges, allowing attackers to elevate their own privileges.	14 Feb 202500:00	–	bdu_fstec
Chainguard	CVE-2025-23015 vulnerabilities	15 Mar 202510:12	–	cgr
Circl	CVE-2025-23015	3 Feb 202523:49	–	circl
CNNVD	Apache Cassandra 安全漏洞	4 Feb 202500:00	–	cnnvd
CVE	CVE-2025-23015	4 Feb 202509:37	–	cve
Cvelist	CVE-2025-23015 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions	4 Feb 202509:37	–	cvelist
EUVD	EUVD-2025-0230	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)	25 Aug 202515:32	–	github
Github Security Blog	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions	4 Feb 202512:30	–	github

Source	Link
openwall	www.openwall.com/lists/oss-security/2025/02/03/2
openwall	www.openwall.com/lists/oss-security/2025/02/11/1
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23015.json
lists	www.lists.apache.org/thread/jmks4msbgkl65ssg69x728sv1m0hwz3s
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-23015
security	www.security.netapp.com/advisory/ntap-20250214-0006/

15 Jul 2026 01:48Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

EPSS0.00964

apache cassandra privilege escalation unsafe actions data access rules security update software vulnerability