Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption

Cybersecuritynews •Abinaya • January 26, 2026

A moderate-severity vulnerability in the Hadoop Distributed File System (HDFS) native client could allow attackers to trigger system crashes or corrupt critical data through maliciously crafted URI inputs. The vulnerability, tracked as CVE-2025-27821, affects Apache Hadoop versions 3.2.0 through 3.4.1. Stems from an out-of-bounds write flaw in the URI parser of the HDFS native client. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Apache Hadoop Vulnerability Allows Data Corruption and System Crashes A moderate-severity vulnerability in Apache Hadoop's HDFS native client could allow attackers to cause system crashes or corrupt data via malicious URI inputs. This flaw, tracked as CVE-2025-27821, affects versions 3.2.0 through 3.4.1 and is due to an out-of-bounds write issue in the URI parser. 3 sources 30

Extracted Entities

CVEs (1)

CVE-2025-27821

Platforms (2)

Apache Hadoop Hadoop Distributed File System (hdfs) Native Client