CVE-2026-32588: CWE-400 Uncontrolled Resource Consumption in Apache Software Foundation Apache Cassandra
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
AI Analysis
Technical Summary
This vulnerability in Apache Cassandra permits an authenticated user to perform a denial of service attack by repeatedly changing passwords via CQL, which raises query latencies and leads to uncontrolled resource consumption. The affected versions are 4.0, 4.1, and 5.0. The Apache Software Foundation has released fixed versions 4.0.20, 4.1.11, and 5.0.7 to remediate this issue. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.
Potential Impact
An authenticated user can degrade the availability of Apache Cassandra by causing increased query latencies through repeated password changes, effectively leading to a denial of service condition. There is no impact on confidentiality or integrity. This could affect applications relying on Cassandra for data availability and responsiveness.
Mitigation Recommendations
Users should upgrade Apache Cassandra to versions 4.0.20, 4.1.11, or 5.0.7 where this vulnerability is fixed. No other mitigations or temporary fixes are indicated. Patch status is confirmed by the vendor recommendation to upgrade to these versions.
CVE-2026-32588: CWE-400 Uncontrolled Resource Consumption in Apache Software Foundation Apache Cassandra
Description
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Apache Cassandra permits an authenticated user to perform a denial of service attack by repeatedly changing passwords via CQL, which raises query latencies and leads to uncontrolled resource consumption. The affected versions are 4.0, 4.1, and 5.0. The Apache Software Foundation has released fixed versions 4.0.20, 4.1.11, and 5.0.7 to remediate this issue. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.
Potential Impact
An authenticated user can degrade the availability of Apache Cassandra by causing increased query latencies through repeated password changes, effectively leading to a denial of service condition. There is no impact on confidentiality or integrity. This could affect applications relying on Cassandra for data availability and responsiveness.
Mitigation Recommendations
Users should upgrade Apache Cassandra to versions 4.0.20, 4.1.11, or 5.0.7 where this vulnerability is fixed. No other mitigations or temporary fixes are indicated. Patch status is confirmed by the vendor recommendation to upgrade to these versions.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apache
- Date Reserved
- 2026-03-12T13:36:03.338Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d53bdbaaed68159a38bdba
Added to database: 4/7/2026, 5:16:11 PM
Last enriched: 4/15/2026, 12:30:02 PM
Last updated: 5/22/2026, 5:57:06 PM
Views: 101
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.