CVE-2022-21699

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

• CWE-250
• CWE-279
• CWE-269

• https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668Patch, Third Party Advisory
• https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5xExploit, Third Party Advisory
• https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699Release Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/01/msg00021.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRQRTWHYXMLDJ572VGVUZMUPEOTPM3KB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZ7LVZBB4D7KVSFNEQUBEHFO3JW6D2ZK/
• https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668Patch, Third Party Advisory
• https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5xExploit, Third Party Advisory
• https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699Release Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/01/msg00021.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRQRTWHYXMLDJ572VGVUZMUPEOTPM3KB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZ7LVZBB4D7KVSFNEQUBEHFO3JW6D2ZK/

Published

Jan 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21693OnionShare is an open source tool that lets you securely and…6.5
• CVE-2022-21694OnionShare is an open source tool that lets you securely and…5.3
• CVE-2022-21695OnionShare is an open source tool that lets you securely and…5.3
• CVE-2022-21696OnionShare is an open source tool that lets you securely and…4.3
• CVE-2022-21697Jupyter Server Proxy is a Jupyter notebook server extension …7.1
• CVE-2022-21698client_golang is the instrumentation library for Go applicat…7.5
• CVE-2022-2170The Microsoft Advertising Universal Event Tracking (UET) Wor…4.8
• CVE-2022-21700Micronaut is a JVM-based, full stack Java framework designed…5.3
• CVE-2022-21701Istio is an open platform to connect, manage, and secure mic…8.8
• CVE-2022-21702Grafana is an open-source platform for monitoring and observ…5.4
• CVE-2022-21703Grafana is an open-source platform for monitoring and observ…8.8
• CVE-2022-21704log4js-node is a port of log4js to node.js. In affected vers…5.5