The vulnerability is an improper access control flaw in Azure Managed Instance for Apache Cassandra. An attacker who has been authorized to access the instance can run arbitrary code across the network, leading to a remote code execution that compromises confidentiality, integrity, and availability.

Microsoft Azure Managed Instance for Apache Cassandra is the affected product. No specific version information is provided, indicating that all managed instances may be vulnerable.

The CVSS score of 9.9 indicates critical severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog. Because an attacker must be authorized to the instance, exploitation risk depends on the ability to authenticate or otherwise obtain authorized credentials. Nonetheless, a successful attack would allow arbitrary code execution, making it a high‑risk business threat. The CWE-284 classification highlights the root cause as improper access control.