AZL-82676
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82676.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-82676
- Upstream
- Published
- 2026-04-07T17:16:27Z
- Modified
- 2026-08-29T05:25:22Z
- Summary
- CVE-2026-27314 affecting package cassandra 5.0.0-2
- Details
-
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY.
Users are recommended to upgrade to version 5.0.7+, which fixes this issue.
- References