점검 대응높음KEV 미등록
CVE-2026-35397
jupyter-server jupyter_server, Red Hat Migration Toolkit for Applications 8.2, Red Hat OpenShift AI (RHOAI) 취약점
Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling directories whose names begin with the same prefix as the root_dir. For example, with a root_dir named "test", the API permits access to a sibling directory named "testtest" through a crafted request to the /api/contents endpoint using encoded path components. An attacker can read, write, and delete files in affected sibling directories. Multi-tenant deployments using predi...
- 대응 우선순위
- 점검
- CVSS
- 7.6
- EPSS
- 0.58% 백분위 44.6% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.05.06