This page lists security fixes that the Kyuubi PMC felt warranted a CVE. If you think something is missing from this list or if you think the set of impacted or fixed versions is incomplete then please ask on security@kyuubi.apache.org.
CVEs are presented in most-recent-first order of announcement.
The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can
bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases.
Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to write controlled content outside the intended upload directory, subject to filesystem permissions.
Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior.
Users are recommended to upgrade to version 1.12.0, which disables the proxy by default. To restore proxied Engine UI,
set kyuubi.frontend.rest.engine.ui.proxy.enabled=true and configure allowed target hosts with kyuubi.frontend.rest.engine.ui.proxy.hosts.
Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config
kyuubi.session.local.dir.allow.list and use local files which are not listed in the config.