CVE-2021-33036

CVE-2021-33036 is a privilege escalation vulnerability affecting Apache Hadoop versions 2.2.0 through 2.10.1, 3.0.0-alpha1 through 3.1.4, 3.2.0 through 3.2.2, and 3.3.0 through 3.3.1. An attacker who can escalate to the 'yarn' user can execute arbitrary commands as the 'root' user. This vulnerability has a CVSS score of 8.8 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with a low attack complexity and requiring low privileges. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Organizations are advised to upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2, or higher to mitigate this risk.