CVE-2026-6657

A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use of `re.match()` for validating the `Origin` header, which only anchors at the start of the string. This allows attacker-controlled domains such as `trusted.example.com.evil.com` to pass validation against patterns intended to match `trusted.example.com`. The vulnerability affects multiple locations in the codebase, including CORS headers, WebSocket connections, referer validation, and login redirects, potentially enabling phishing attacks, arbitrary code execution, and unauthorized access to sensitive API responses.

• CWE-346

• https://huntr.com/bounties/18f642db-3569-43b3-b58d-ff97be4b09d7Exploit, Third Party Advisory
• https://huntr.com/bounties/18f642db-3569-43b3-b58d-ff97be4b09d7Exploit, Third Party Advisory

Published

Jun 3, 2026

Last Modified

Jul 21, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6650A vulnerability was identified in Z-BlogPHP 1.7.5. This affe…4.7
• CVE-2026-6651A security flaw has been discovered in erponline.xyz ERP Onl…2.4
• CVE-2026-6652A weakness has been identified in Pagekit CMS up to 1.0.18. …4.7
• CVE-2026-6653Use After Free in libxml2's xmlParseInternalSubset from GNOM…9.8
• CVE-2026-6654Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` a…5.1
• CVE-2026-6656Crypt::Password versions through 0.28 for Perl are susceptib…7.5
• CVE-2026-6658A vulnerability in jupyter/nbconvert versions <= 7.17.0 allo…5.4
• CVE-2026-6659Crypt::PasswdMD5 versions through 1.42 for Perl generates in…7.5
• CVE-2026-6662A vulnerability was found in ericc-ch copilot-api up to 0.7.…7.3
• CVE-2026-6663The GWD Connect plugin for WordPress is vulnerable to missin…4.8
• CVE-2026-6664An integer overflow in network packet parsing code in PgBoun…7.5
• CVE-2026-66642Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrel…5.4