PT-2025-24459 · Apache+1 · Apache Cassandra+1

Adam Pond + 3 · Published 2025-02-10 · Updated 2025-09-23 · CVE-2025-26467

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 3.0.30 Apache Cassandra versions 3.11.17 Apache Cassandra versions 4.0.16 Apache Cassandra versions 4.1.7 Apache Cassandra versions 5.0.2

Description: A privilege escalation issue exists in Apache Cassandra where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. This can potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations: Upgrade to Apache Cassandra version 4.0.17 to resolve the issue. Follow the recommendations from CVE-2025-23015 for versions 3.0, 3.11, 4.1, and 5.0.

Fix

Weakness Enumeration

CWE-267

CWE-275

Related Identifiers

AZL-66675

AZL-66698

BDU:2025-06618

BIT-CASSANDRA-2025-26467

CVE-2025-26467

GHSA-5C4F-PXMX-XCM4

Affected Products

Apache Cassandra

Red Os

References · 15

• https://osv.dev/vulnerability/GHSA-5c4f-pxmx-xcm4 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-cassandra-2025-26467 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06618 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26467 · Vendor Advisory
• https://lists.apache.org/thread/xxj36rr4d6mzyqpld05dn8b9951hfpz7 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-66675 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-66698 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26467 · Security Note
• https://github.com/apache/cassandra · Note
• https://twitter.com/cracbot/status/1961383380177883394 · Twitter Post
• https://vuldb.com/ru/?id.295275 · Note
• https://twitter.com/CVEnew/status/1959988625153638654 · Twitter Post
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585905 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-cassandra-cve-2025-26467 · Note