{"id":"CVE-2016-6811","aliases":["GHSA-mf7c-35mq-75pj"],"url":"https://o3.security/vulnerability/CVE-2016-6811","summary":"Insecure Inherited Permissions in  Apache Hadoop","details":"In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.","published":"2017-04-11T14:59:00.193Z","modified":"2026-07-08T12:27:32.687441Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.0262,"percentile":0.84628,"asOf":"2026-09-15"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.apache.hadoop:hadoop-common","fixedVersion":"2.7.4"}],"fix":null,"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307%40%3Cgeneral.hadoop.apache.org%3E"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6811"},{"type":"WEB","url":"https://lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307@%3Cgeneral.hadoop.apache.org%3E"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T12:27:32.687441Z"}}