Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments, an input validation error vulnerability exists in Apache Ozone, which stems from the product’s Ozone Datanode not checking the block token’s access mode parameter. An attacker could use a token with READ privileges to perform a write operation through this vulnerability.