VDB
CISA-2025-27821
CISA-2025-27821
PUBLISHED
CVSS 7.3 HIGH
Reported by apache · Published January 26, 2026
Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Risk Scores
CVSS 3.1
7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | HDFS native client | 3.2.0 |
| Apache Software Foundation | HDFS native client | 3.2.0, 3.2.0 |
Timeline
- Jan 26, 2026 CVE Published
- Jan 26, 2026 CVE Updated
References
- vendor-advisory
- http://www.openwall.com/lists/oss-security/2026/01/23/7 url