Junglewise Threat Intelligence

CVE-2026-27314: Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

CVE-2026-27314 · Severity: low · CVSS 3.1 · Published 2026-04-07

Technologies: org.apache.cassandra:cassandra-all (Maven). Vendors: Maven.

Executive brief

Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

Affected products

Maven org.apache.cassandra:cassandra-all

Related threats

Apache Cassandra has sensitive Information Leak in cqlsh
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
Missing Authentication for Critical Function in Apache Cassandra