Cassandra EUVD-2026-19763

This vulnerability presents a nuanced risk profile. The CVSS 3.1 score of 5.5 reflects local attack vector (AV:L), low complexity (AC:L), and low privilege requirements (PR:L), with high confidentiality impact (C:H) but no integrity or availability impact. However, the EPSS score of 0.02% (percentile 4%) indicates extremely low likelihood of exploitation in the wild, suggesting limited practical weaponization despite the technical feasibility. The attack requires local file system access and existing user privileges, making it most relevant in multi-tenant hosting, shared development environments, or scenarios where user isolation is weak. No CISA KEV status or public proof-of-concept provided in the input, indicating this is not confirmed actively exploited. The vulnerability is primarily a lateral privilege escalation or credential theft risk post-compromise rather than a primary attack vector, making it lower priority than remote code execution or unauthenticated information disclosure vulnerabilities, though still material for compliance and defense-in-depth in sensitive deployments.

A low-privileged local user gains access to a shared development server running Cassandra 4.0.15. The user browses another developer's home directory and reads ~/.cassandra/cqlsh_history, recovering database admin credentials from a CREATE USER command executed earlier in the day. The attacker uses these credentials to connect directly to the Cassandra cluster and extract sensitive data from a production backup database stored on the same server. This scenario is feasible due to the low complexity (AV:L/AC:L) and low privilege requirement (PR:L), and occurs frequently in multi-tenant cloud environments or shared lab infrastructure, although the overall EPSS of 0.02% suggests exploitation remains uncommon in practice.