VendorsApachekyuubiany version
Vulnerabilities

Apache Kyuubi any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-52680
Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write
Published 2026-07-30 · Analyzed
9.8EPSS 0.011
CVE-2025-66518
Apache Kyuubi: Unauthorized directory access due to missing path normalization
Published 2026-01-05 · Analyzed
8.8EPSS 0.011
CVE-2026-62391
Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases
Published 2026-07-31 · Analyzed
8.1EPSS 0.008
CVE-2026-23904
Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy
Published 2026-07-29 · Analyzed
7.3EPSS 0.009