CVE-2026-65770 describes an argument injection vulnerability in Azure Managed Instance for Apache Cassandra. The flaw involves improper neutralization of argument delimiters in a command, classified as CWE-88. An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code without authentication. The vulnerability affects Microsoft's managed cloud service for Apache Cassandra. It has been assigned a high criticality rating. Microsoft has published guidance through its Security Response Center. The vulnerability poses significant risk to organizations relying on Azure Managed Instance for Apache Cassandra for their database workloads. No additional technical details or proof-of-concept information are currently available in the NVD entry.
