CVE-2026-27315

Apache Cassandra version 4.0 is vulnerable to a Sensitive Information Leak in its cqlsh command-line tool. The tool fails to redact sensitive information, such as passwords , when saving command history to the ~/.cassandra/cqlsh_history local file. This allows an attacker with local file access t...