CVEvulnerability
CVE-2026-32588
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-04-07
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.
Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
Affected configurations
• apache cassandra (>= 4.0.0 < 4.0.20)
• apache cassandra (>= 4.1.0 < 4.1.11)
• apache cassandra (>= 5.0.0 < 5.0.7)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://lists.apache.org/thread/2tnwjdnss378glxrsmnlzz3k53ftphrc Mailing List, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/04/07/9 Mailing List, Third Party Advisory