CVE-2025-26467

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

Apache Cassandra 安全漏洞

Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra versions 3.0.30, 3.11.17, 4.0.16, 4.1.7, and 5.0.2, which stems from an improperly defined privilege that could lead to elevation of privilege...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow, py3-cassandra-medusa...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow, py3-cassandra-medusa...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: airflow-core, py3-vllm-cuda-12.4, request-1276, airflow, dask-kubernetes, py3-cassandra-medusa, text-generation-inference, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: airflow-core, py3-vllm-cuda-12.4, request-1276, airflow, dask-kubernetes, py3-cassandra-medusa, text-generation-inference, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, kserve-modelmesh, airflow, flyway, apache-activemq-artemis, nrjmx, jenkins-plugin-manager, apicurio-registry, spdx-tools-java, dependency-track, keycloak-config-cli, maven-stage0, nextflow, zipkin, cassandra-reaper,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, kserve-modelmesh, airflow, flyway, apache-activemq-artemis, nrjmx, jenkins-plugin-manager, apicurio-registry, spdx-tools-java, dependency-track, keycloak-config-cli, maven-stage0, nextflow, zipkin, cassandra-reaper,...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, akhq, druid, tritonserver-backend-vllm-cuda-12.9, zaproxy, management-api-for-apache-cassandra-4.0, confluent-kafka-jre-bcfips, commercial-elasticsearch, camunda-zeebe, debezium-connector-spanner, sonarqube, neo4j, logstash, jenkins-plugin-manager,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: spdx-tools-java, akhq, druid, tritonserver-backend-vllm-cuda-12.9, zaproxy, management-api-for-apache-cassandra-4.0, confluent-kafka-jre-bcfips, commercial-elasticsearch, camunda-zeebe, debezium-connector-spanner, sonarqube, neo4j, logstash, jenkins-plugin-manager,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: spark, cassandra, confluent-common-docker, druid, gradle-stage0, tez, scala, cassandra-reaper...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: spark, cassandra, confluent-common-docker, druid, gradle-stage0, tez, scala, cassandra-reaper...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: spark, confluent-common-docker, druid, tez, scala, cassandra-fips, cassandra, elasticsearch, gradle-stage0, localstack, spark-fips, hadoop-client-modules, hadoop-fips, celeborn, cassandra-reaper...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: spark, confluent-common-docker, druid, tez, scala, cassandra-fips, cassandra, elasticsearch, gradle-stage0, localstack, spark-fips, hadoop-client-modules, hadoop-fips, celeborn, cassandra-reaper...

The vulnerability of the distributed database management system Apache Cassandra, related to improper handling of privileges, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the distributed database management system Apache Cassandra is related to improper handling of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins-plugin-manager, strimzi-kafka-operator, trino, wildfly, apicurio-registry, celeborn, jenkins, confluent-common-docker, akhq, druid, opensearch, sonarqube, spdx-tools-java, tez, apache-activemq-artemis, cassandra-reaper...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins-plugin-manager, strimzi-kafka-operator, trino, wildfly, apicurio-registry, celeborn, jenkins, confluent-common-docker, akhq, druid, opensearch, sonarqube, spdx-tools-java, tez, apache-activemq-artemis, cassandra-reaper...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, akhq, confluent-common-docker, druid, confluent-kafka-jre-bcfips, camunda-zeebe, sonarqube, neo4j, jenkins-plugin-manager, apache-nifi, ghidra, celeborn, cassandra-reaper, kafka, opensearch, apicurio-registry, apache-activemq-artemis, wildfly,...

CVE-2023-30601

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be...