Skip to content
Sign in
8.8 High

CVE-2025-26511 Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through…

Description

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow authenticated Cassandra users to remotely bypass RBAC and escalate their privileges.

Affected products and versions

Product Affected versions Fixed in
Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin 4.1 4.1.2-1.0.0 → 4.1.8-1.0.0 No fix stated
Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin 4.0 4.0-rc1-1.0.0 → 4.0.16-1.0.0 No fix stated
Track this CVE