Apache Kyuubi security advisories

Security information for Apache Kyuubi

Reporting

Do you want disclose a potential security issue for Apache Kyuubi? Send your report to the Apache Kyuubi Security Team.

Advisories

This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public mailinglist or privately on security@apache.org

kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases

CVE-2026-62391 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-31T09:20:26.636Z

Affected

  • Apache Kyuubi from 1.6.0 before 1.12.0

Description

The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases.

This issue affects Apache Kyuubi: from 1.6.0 before 1.12.0.

Users are recommended to upgrade to version 1.12.0, which fixes the issue.

References

Credits

  • Anand Nalya (finder)

REST batch multipart upload path traversal allows controlled file write

CVE-2026-52680 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-30T08:27:43.964Z

Affected

  • Apache Kyuubi from 1.7.0 through 1.11.1

Description

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to write controlled content outside the intended upload directory, subject to filesystem permissions.

This issue affects Apache Kyuubi: from 1.7.0 through 1.11.1.

Users are recommended to upgrade to version 1.12.0, which fixes the issue.

References

Credits

  • LTSHFWJT (finder)

Unrestricted access via Kyuubi engine-ui proxy

CVE-2026-23904 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-29T04:15:21.816Z

Affected

  • Apache Kyuubi from 1.8.0 before 1.12.0

Description

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior.

This issue affects Apache Kyuubi: from 1.8.0 before 1.12.0.

Users are recommended to upgrade to version 1.12.0, which disables the proxy by default. To restore proxied Engine UI, set kyuubi.frontend.rest.engine.ui.proxy.enabled=true and configure allowed target hosts with kyuubi.frontend.rest.engine.ui.proxy.hosts.

References

Credits

  • Ícaro Torres (reporter)

Unauthorized directory access due to missing path normalization

CVE-2025-66518 [CVE] [CVE json] [OSV json]

Last updated: 2026-01-05T08:46:25.781Z

Affected

  • Apache Kyuubi from 1.6.0 through 1.10.2

Description

Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allow.list and use local files which are not listed in the config.

This issue affects Apache Kyuubi: from 1.6.0 through 1.10.2.

Users are recommended to upgrade to version 1.10.3 or upper, which fixes the issue.

References

Credits

  • Hiroki Egawa (reporter)
  • Hiroki Egawa (remediation developer)