Executive brief
Apache Cassandra has sensitive Information Leak in cqlsh
Affected products
- Maven org.apache.cassandra:cassandra-all
Junglewise Threat Intelligence
CVE-2026-27315: Apache Cassandra has sensitive Information Leak in cqlsh
CVE-2026-27315 · Severity: medium · CVSS 4 · Published 2026-04-07
Technologies: org.apache.cassandra:cassandra-all (Maven). Vendors: Maven.
Related threats
- Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator
- Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
- Missing Authentication for Critical Function in Apache Cassandra