CVE-2022-33891— Apache Spark shell command injection vulnerability via Spark UI

KEV EPSS 93.51% · P100 Updated Feb 25, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-33891

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Apache Spark shell command injection vulnerability via Spark UI

Source: NVD (National Vulnerability Database)

Vulnerability Description

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: NVD (National Vulnerability Database)

Vulnerability Title

Apache Spark 操作系统操作系统命令注入漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Apache Spark是美国阿帕奇（Apache）基金会的一款支持非循环数据流和内存计算的大规模数据处理引擎。 Apache Spark 存在操作系统命令注入漏洞，该漏洞源于Apache Spark UI中的 ACL 功能中的输入验证不正确。远程攻击者利用该漏洞可以请求特制 URL 并在目标系统上执行任意操作系统命令。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Apache Software Foundation	Apache Spark	3.0.3 and earlier ~ 3.0.3	-

II. Public POCs for CVE-2022-33891

#	POC Description	Source Link	Shenlong Link
1	cve-2022-33891-poc	https://github.com/W01fh4cker/cve-2022-33891	POC Details
2	Apache Spark Shell Command Injection Vulnerability	https://github.com/HuskyHacks/cve-2022-33891	POC Details
3	Apache Spark Command Injection PoC Exploit for CVE-2022-33891	https://github.com/west-wind/CVE-2022-33891	POC Details
4	None	https://github.com/AkbarTrilaksana/cve-2022-33891	POC Details
5	Apache Spark RCE	https://github.com/llraudseppll/cve-2022-33891	POC Details
6	「💥」CVE-2022-33891 - Apache Spark Command Injection	https://github.com/AmoloHT/CVE-2022-33891	POC Details
7	CVE-2022-33891 Exploit For Apache Spark	https://github.com/DrLinuxOfficial/CVE-2022-33891	POC Details
8	Apache Spark RCE - CVE-2022-33891	https://github.com/Vulnmachines/Apache-spark-CVE-2022-33891	POC Details
9	For CVE-2022-33891 Apache Spark: Emulation and Detection by West Shepherd	https://github.com/ps-interactive/lab_security_apache_spark_emulation_detection	POC Details
10	None	https://github.com/IMHarman/CVE-2022-33891	POC Details
11	None	https://github.com/elsvital/cve-2022-33891-fix	POC Details
12	A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)	https://github.com/K3ysTr0K3R/CVE-2022-33891-EXPLOIT	POC Details
13	PoC for CVE-2022-33891	https://github.com/nanaao/CVE-2022-33891	POC Details
14	None	https://github.com/asepsaepdin/CVE-2022-33891	POC Details
15	Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow impersonation by providing an arbitrary user name. An attacker can potentially reach a permission check function that will ultimately build a Unix shell command based on input and execute it, resulting in arbitrary shell command execution. Affected versions are 3.0.3 and earlier, 3.1.1 to 3.1.2, and 3.2.0 to 3.2.1.	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33891.yaml	POC Details
16	None	https://github.com/Threekiii/Awesome-POC/blob/master/%E5%BC%80%E5%8F%91%E6%A1%86%E6%9E%B6%E6%BC%8F%E6%B4%9E/Apache%20Spark%20doAs%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2022-33891.md	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2022-33891

请登录查看更多情报信息。

Same Patch Batch · Apache Software Foundation · 2022-07-18 · 3 CVEs total

CVE-2022-35741		Apache CloudStack SAML Single Sign-On XXE
CVE-2022-36127		Service unavailability impact in NodeJS agent(version <= 0.5.0)

IV. Related Vulnerabilities

Same product: Apache Spark

Same vendor: Apache Software Foundation

Same weakness: CWE-78

V. Comments for CVE-2022-33891

Anonymous User

2025-09-01 09:24:40

Fantastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) glasses Okotoks

Anonymous User

2025-10-14 17:17:44

Fantastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) blue light blocker Okotoks

Anonymous User

2025-10-16 18:24:15

Fantastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) eyeglasses calgary https://www.fantasticglasses.ca/

Anonymous User

2025-10-17 20:21:16

Fantatic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) optical Okotoks

Anonymous User

2026-02-09 13:33:36

Fantastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) eyeglasses calgary https://www.fantasticglasses.ca/

Anonymous User

2026-03-19 05:12:42

Fantastic Glasses unit 401 235 Milliga Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) sunglasses Okotoks

Anonymous User

2026-03-26 03:04:13

Fantastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) eye exam near me https://www.fantasticglasses.ca/

Anonymous User

2026-03-29 06:42:56

Fantastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) progressive lenses Okotoks

Anonymous User

2026-04-18 15:36:41

Fantrastic Glasses unit 401 235 Milligan Dr Okotoks, AB T1S 0B8 info@fantasticglasses.ca 587-997-EYES(3937) free eye teet calgary https://www.fantasticglasses.ca/

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2022-33891— Apache Spark shell command injection vulnerability via Spark UI

I. Basic Information for CVE-2022-33891

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2022-33891

III. Intelligence Information for CVE-2022-33891

Same Patch Batch · Apache Software Foundation · 2022-07-18 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2022-33891

Anonymous User

Anonymous User

Anonymous User

Anonymous User

Anonymous User

Anonymous User

Anonymous User

Anonymous User

Anonymous User

Leave a comment