CVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544)

October 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in Jupyter Server up to 2.5.x. Affected by this issue is the function is_authorized of the file GatewayClient.url of the component GatewayClient. The manipulation results in authorization bypass.

This vulnerability is identified as CVE-2026-114135. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More