CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Summary / Details Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.0-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited coul...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511 Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511 Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511 Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511

CVE-2025-26511 affects the Instaclustr fork of Stratio’s Cassandra-Lucene-Index plugin when installed into Apache Cassandra 4.x. The vulnerability allows authenticated Cassandra users to bypass RBAC and escalate privileges due to a flaw in the plugin’s access control. Affected plugin versions are...

CVE-2025-26511: Incorrect Authorization

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

PT-2025-7174

Name of the Vulnerable Software and Affected Versions: Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.1.0-1.0.0 through 4.1.8-1.0.0 Description: The vulnerability allows...

Cassandra-Lucene-Index security vulnerability

cassandra-lucene-index is a Lucene-based secondary index for Cassandra open-sourced by NetApp Instaclustr. A security vulnerability exists in cassandra-lucene-index. An authenticated attacker could remotely bypass RBAC and elevate its privileges by exploiting this vulnerability...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.1.8.1, <=2.1.8.6), org.apache.atlas:atlas-index-repair-tool (>=2.2.0, <=2.4.0) +2 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.8)

org.apache.cassandra:cassandra-all MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.1.8.1, =2.2.0, =2.2.0, =2.4.0 -...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.19.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.19)

org.apache.cassandra:cassandra-all MAVEN version 2.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.1.19.0 Source cves: CVE-2025-23015...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.10.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.10)

org.apache.cassandra:cassandra-all MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.1.10.0 Source cves: CVE-2025-23015...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.11.1) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.11)

org.apache.cassandra:cassandra-all MAVEN version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.1.11.1 Source cves: CVE-2025-23015...

com.att.cadi:cadi-cass (>=1.3.0, <=1.3.2-oss), com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.14.0) +2 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.14)

org.apache.cassandra:cassandra-all MAVEN version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.att.cadi:cadi-cass =1.3.0, =1.0.0, =1.0.0, =1.2.2 Source cves: CVE-2025-23015 Source...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.16.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.16)

org.apache.cassandra:cassandra-all MAVEN version 2.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.1.16.0 Source cves: CVE-2025-23015...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.2.7.0, <=2.2.7.1), io.cassandrareaper:cassandra-reaper (>=1.0.2, <=1.1.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.7)

org.apache.cassandra:cassandra-all MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.2.7.0, =1.0.2, =1.1.0 Source cves:...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.2.8.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.8)

org.apache.cassandra:cassandra-all MAVEN version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.2.8.0 Source cves: CVE-2025-23015...