Apache Software Foundation Apache Kyuubi

• CVE-2026-62391 High 8.1 Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases 0.8%
• CVE-2026-52680 Critical 9.8 Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write 1.1%
• CVE-2026-23904 High 7.3 Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy 0.9%
• CVE-2025-66518 High 8.8 Apache Kyuubi: Unauthorized directory access due to missing path normalization 1.0%