← Vulnerability feed

Vulnerability record · CVE-2024-35178 · published 6 June 2024

CVE-2024-35178: Jupyter server information exposure vulnerability

Jupyter · Jupyter Server

The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Or an attacker perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines. This vulnerability is fixed in 2.14.1.

7.5 CVSS 3.1 High EPSS 0.71% · top 48.6% CWE-200 · Information exposure
7.5CVSS 3.1 base score
0.71%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Or an attacker perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines. This vulnerability is fixed in 2.14.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df Patch
https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-hrw6-wg82-cm62 Vendor Advisory
https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df Patch
https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-hrw6-wg82-cm62 Vendor Advisory

Track CVE-2024-35178 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2026-44727Jupyter server cross-site scripting vulnerabilityJupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored noteboo…EPSS 0.44%8.8CVE-2026-6657Jupyter server origin validation error vulnerabilityA vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` conf…EPSS 0.27%8.8CVE-2022-29241Jupyter server information exposure vulnerabilityJupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to v…EPSS 0.95%8.1CVE-2026-5422Jupyter server relative path traversal vulnerabilityA path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() functi…EPSS 0.55%7.6CVE-2026-40110Jupyter server vulnerabilityJupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to …EPSS 0.47%7.6CVE-2026-40934Jupyter server insufficient session expiration vulnerabilityJupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persist…EPSS 0.38%7.6CVE-2026-35397Jupyter server path traversal vulnerabilityJupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an …EPSS 0.67%7.5CVE-2022-24757Jupyter server sensitive information in log file vulnerabilityThe Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, una…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2024-35178), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.