Apache Hadoop Flaw Could Trigger System Crashes or Data Corruption

Gbhackers •Divya • January 26, 2026

A moderate out-of-bounds write vulnerability in Apache Hadoop’s HDFS native client that could allow attackers to trigger system crashes or cause data corruption in production environments. The flaw, identified as CVE-2025-27821, affects the native HDFS client’s URI parser and has been assigned moderate severity by Apache. The vulnerability was discovered and reported by security researcher […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Apache Hadoop Vulnerability Allows Data Corruption and System Crashes A moderate-severity vulnerability in Apache Hadoop's HDFS native client could allow attackers to cause system crashes or corrupt data via malicious URI inputs. This flaw, tracked as CVE-2025-27821, affects versions 3.2.0 through 3.4.1 and is due to an out-of-bounds write issue in the URI parser. 3 sources 30

Extracted Entities

CVEs (1)

CVE-2025-27821

Platforms (1)

Apache Hadoop