PT-2025-34294 · Apache · Hdfs

Adam Bertrand + 1 · CVE-2025-54460 · Published 2025-08-12 · Updated 2025-08-22

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:P

Name of the Vulnerable Software and Affected Versions: (affected versions not specified)

Description: The vulnerability could allow an authenticated attacker with privileges to create or access publication targets of type Text File or HDFS to upload and persist files that could potentially be executed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2026-00074

CVE-2025-54460

Affected Products

Hdfs

References · 6

• https://bdu.fstec.ru/vul/2026-00074 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-54460 · Security Note
• https://twitter.com/VulmonFeeds/status/1958714232859414785 · Twitter Post
• https://twitter.com/CVEnew/status/1958659356414943439 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-224-04 · Note
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-004.pdf · Note