CVE-2022-29241

Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of `root_dir` that contains the starting user's home directory, then the underlying REST API can be used to leak the access token assigned at start time by guessing/brute forcing the PID of the jupyter server. While this requires an authenticated user session, this URL can be used from a cross-site scripting payload or from a hooked or otherwise compromised browser to leak this access token to a malicious third party. This token can be used along with the REST API to interact with Jupyter services/notebooks such as modifying or overwriting critical files, such as .bashrc or .ssh/authorized_keys, allowing a malicious user to read potentially sensitive data and possibly gain control of the impacted system. This issue is patched in version 1.17.1.

• CWE-200

• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-q874-g24w-4q9gThird Party Advisory
• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-q874-g24w-4q9gThird Party Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29235BigBlueButton is an open source web conferencing system. Sta…5.3
• CVE-2022-29236BigBlueButton is an open source web conferencing system. Sta…4.3
• CVE-2022-29237Opencast is a free and open source solution for automated vi…5.4
• CVE-2022-29238Jupyter Notebook is a web-based notebook environment for int…4.3
• CVE-2022-2924Cross-site Scripting (XSS) - Stored in GitHub repository yet…5.4
• CVE-2022-29240Scylla is a real-time big data database that is API-compatib…8.1
• CVE-2022-29242GOST engine is a reference implementation of the Russian GOS…7.5
• CVE-2022-29243Nextcloud Server is the file server software for Nextcloud, …4.3
• CVE-2022-29244npm pack ignores root-level .gitignore and .npmignore file e…7.5
• CVE-2022-29245SSH.NET is a Secure Shell (SSH) library for .NET. In version…5.9
• CVE-2022-29246Azure RTOS USBX is a USB host, device, and on-the-go (OTG) e…9.8
• CVE-2022-29247Electron is a framework for writing cross-platform desktop a…9.8