What’s Vulnerable › Products

Apache Software Foundation Apache Kyuubi vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Apache Software Foundation Apache Kyuubi version is affected

Latest Apache Software Foundation Apache Kyuubi vulnerabilities

• CVE-2026-62391 — Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases (CVSS 8.1)
• CVE-2026-52680 — Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write (CVSS 9.8)
• CVE-2026-23904 — Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy (CVSS 7.3)
• CVE-2025-66518 — Apache Kyuubi: Unauthorized directory access due to missing path normalization (CVSS 8.8)