CVE-2026-27315

CVE-2026-27315 affects Apache Cassandra 4.0 and its cqlsh history mechanism. The issue allows a local attacker to access sensitive data by reading the ~/.cassandra/cqlsh_history file, where command history can contain passwords and other secrets in cleartext if entered during cqlsh sessions. The ...