The vulnerability in jupyter-server arises from the use of Python's re.match() function to validate the Origin header against allow_origin_pat patterns. Because re.match() anchors only at the start of the string, domains such as trusted.example.com.evil.com can bypass validation intended for trusted.example.com. This origin validation bypass affects CORS headers, WebSocket connections, referer validation, and login redirects, potentially enabling attackers to perform phishing attacks, gain unauthorized access to sensitive API responses, and execute arbitrary code. The vulnerability affects versions 1.12.0 through 2.17.0 of jupyter-server. The CVSS v3.0 score is 6.1 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low confidentiality and integrity impact. No vendor advisory or patch information is currently available.

Successful exploitation can allow attackers to bypass CORS origin validation, leading to unauthorized access to sensitive API responses, phishing attacks, and potentially arbitrary code execution. The vulnerability affects multiple components handling origin validation, increasing the risk of unauthorized actions within affected jupyter-server instances.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or avoiding use of the allow_origin_pat configuration or apply additional manual validation controls if feasible. Monitor official jupyter project channels for updates and patches addressing this issue.