CVE-2026-5422: Path Traversal in jupyter/jupyter
A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath() function within jupyterserver/services/contents/fileio.py. The check uses startswith(root) without appending a trailing path separator, allowing sibling directories with names starting with the same prefix as rootdir to bypass the check. Additionally, the toospath() function in utils.py does not strip ".." from path parts, enabling traversal sequences to bypass the vulnerable check. This vulnerability can lead to unauthorized read/write access to files in sibling directories, potentially exposing sensitive data in shared hosting environments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5422?
The severity of CVE-2026-5422 is classified as medium with a score of 6.8.
How do I fix CVE-2026-5422?
To fix CVE-2026-5422, upgrade jupyter-server to version 2.17.1 or later where the vulnerability is patched.
What software is affected by CVE-2026-5422?
CVE-2026-5422 affects jupyter-server version 2.17.0.
What is a path traversal vulnerability in CVE-2026-5422?
A path traversal vulnerability like CVE-2026-5422 allows an attacker to access directories and files outside the intended directory structure.
When was CVE-2026-5422 published?
CVE-2026-5422 was published on June 2, 2026.