The Apache Kyuubi Engine UI proxy accepts a host and port in the request path and forwards HTTP requests to that destination. An attacker who can reach the proxy endpoint can cause the Kyuubi server to send requests to any reachable host, enabling server‑side request forgery (SSRF) or open‑proxy behavior. This flaw allows an external actor to initiate outbound connections from the Kyuubi environment, potentially exposing internal resources or facilitating further attacks.

Apache Kyuubi versions 1.8.0 up to and including 1.11.9 are affected. Versions from 1.12.0 onward have the proxy feature disabled by default, mitigating the vulnerability.

The CVSS score of 7.3 indicates a high impact, while the EPSS score of less than 1% suggests a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires network access to a Kyuubi instance that has the Engine UI proxy enabled. An attacker can send crafted HTTP requests to the proxy endpoint to direct the server to connect to arbitrary hosts, potentially revealing internal network endpoints or enabling further compromise.