Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-62391

The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases. This issue affects Apache Kyuubi: from 1.6.0 before 1.12.0. Users are recommended to upgrade to version 1.12.0, which fixes the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 41.9%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-62391
  • Apache » Kyuubi » Version: 1.10.0
    cpe:2.3:a:apache:kyuubi:1.10.0
  • Apache » Kyuubi » Version: 1.10.1
    cpe:2.3:a:apache:kyuubi:1.10.1
  • Apache » Kyuubi » Version: 1.10.2
    cpe:2.3:a:apache:kyuubi:1.10.2
  • Apache » Kyuubi » Version: 1.10.3
    cpe:2.3:a:apache:kyuubi:1.10.3
  • Apache » Kyuubi » Version: 1.11.0
    cpe:2.3:a:apache:kyuubi:1.11.0
  • Apache » Kyuubi » Version: 1.11.1
    cpe:2.3:a:apache:kyuubi:1.11.1
  • Apache » Kyuubi » Version: 1.6.0
    cpe:2.3:a:apache:kyuubi:1.6.0
  • Apache » Kyuubi » Version: 1.6.1
    cpe:2.3:a:apache:kyuubi:1.6.1
  • Apache » Kyuubi » Version: 1.7.0
    cpe:2.3:a:apache:kyuubi:1.7.0
  • Apache » Kyuubi » Version: 1.7.1
    cpe:2.3:a:apache:kyuubi:1.7.1
  • Apache » Kyuubi » Version: 1.7.2
    cpe:2.3:a:apache:kyuubi:1.7.2
  • Apache » Kyuubi » Version: 1.7.3
    cpe:2.3:a:apache:kyuubi:1.7.3
  • Apache » Kyuubi » Version: 1.7.4
    cpe:2.3:a:apache:kyuubi:1.7.4
  • Apache » Kyuubi » Version: 1.8.0
    cpe:2.3:a:apache:kyuubi:1.8.0
  • Apache » Kyuubi » Version: 1.8.1
    cpe:2.3:a:apache:kyuubi:1.8.1
  • Apache » Kyuubi » Version: 1.8.2
    cpe:2.3:a:apache:kyuubi:1.8.2
  • Apache » Kyuubi » Version: 1.8.3
    cpe:2.3:a:apache:kyuubi:1.8.3
  • Apache » Kyuubi » Version: 1.9.0
    cpe:2.3:a:apache:kyuubi:1.9.0
  • Apache » Kyuubi » Version: 1.9.1
    cpe:2.3:a:apache:kyuubi:1.9.1
  • Apache » Kyuubi » Version: 1.9.2
    cpe:2.3:a:apache:kyuubi:1.9.2
  • Apache » Kyuubi » Version: 1.9.3
    cpe:2.3:a:apache:kyuubi:1.9.3
  • Apache » Kyuubi » Version: 1.9.4
    cpe:2.3:a:apache:kyuubi:1.9.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved