CVE-2026-32588 | Apache Cassandra up to 4.0.19/4.1.10/5.0.6 ALTER ROLE Password denial of service

A vulnerability was found in Apache Cassandra up to 4.0.19/4.1.10/5.0.6. It has been rated as problematic. Affected is an unknown function of the component ALTER ROLE Password Handler. Performing a manipulation results in denial of service.

This vulnerability is identified as CVE-2026-32588. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.