CVE-2025-23015

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on af...

CVE-2025-24860

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control l...

CVE-2024-27137

In Apache Cassandra it is possible for a local attacker without accessto the Apache Cassandra process or configuration files to manipulatethe RMI registry to perform a man-in-the-middle attack and capture usernames and passwords used to access the JMX interface. The attacker canthen use these crede...