← Vulnerability feed

Vulnerability record · CVE-2022-41137 · published 5 December 2024

CVE-2022-41137: Apache hive deserialization of untrusted data vulnerability

Apache · Hive

Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection to the Metastore. From an API perspective any code that calls the unsafe method may be vulnerable unless it performs additional prerechecks on the input arguments.

8.3 CVSS 3.1 High EPSS 1.6% · top 24.5% CWE-502 · Deserialization of untrusted data
8.3CVSS 3.1 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection to the Metastore. From an API perspective any code that calls the unsafe method may be vulnerable unless it performs additional prerechecks on the input arguments.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/apache/hive Product
https://github.com/apache/hive/commit/60027bb9c91a93affcfebd9068f064bc1f2a74c9 Patch
https://issues.apache.org/jira/browse/HIVE-26539 Issue Tracking
https://lists.apache.org/thread/jwtr3d9yovf2wo0qlxvkhoxnwxxyzgts Mailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2024/12/04/2 Mailing ListThird Party Advisory

Track CVE-2022-41137 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-49845Apache hive code injection vulnerabilitySQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with acc…EPSS 0.89%9.8CVE-2018-21234Jodd deserialization of untrusted data vulnerabilityJodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.EPSS 8.3%9.1CVE-2026-55976Apache hive server-side request forgery (ssrf) vulnerabilityServer-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TA…EPSS 1.0%9.1CVE-2018-1282Apache hive sql injection vulnerabilityThis vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup th…EPSS 5.5%8.3CVE-2015-7521Apache hive improper authentication vulnerabilityThe authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, …EPSS 6.1%8.1CVE-2018-11777Apache hive vulnerabilityIn Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry …EPSS 2.3%7.5CVE-2021-34538Apache hive missing authentication for critical function vulnerabilityApache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was…EPSS 1.8%7.5CVE-2020-13949Apache hive uncontrolled resource consumption vulnerabilityIn Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leadin…EPSS 6.8%

Source: NIST National Vulnerability Database (record CVE-2022-41137), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.