This vulnerability in jupyter-server arises because the allow_origin_pat configuration uses Python's re.match() function to validate the Origin header, which only anchors at the start of the string. Consequently, domains such as trusted.example.com.evil.com can bypass origin validation intended to restrict access to trusted.example.com. The flaw affects various components including CORS headers, WebSocket connections, referer validation, and login redirects. Exploitation could enable attackers to perform phishing attacks, gain unauthorized access to sensitive API responses, and potentially execute arbitrary code. The vulnerability impacts versions 1.12.0 through 2.17.0 of jupyter-server. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

An attacker can bypass CORS origin validation, which may allow unauthorized cross-origin requests to the jupyter-server. This can lead to phishing attacks, unauthorized access to sensitive API responses, and potentially arbitrary code execution. The vulnerability compromises the integrity of origin validation mechanisms across multiple components, increasing the risk of unauthorized data exposure and control.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid using the allow_origin_pat configuration or apply strict manual validation of allowed origins. Monitor official jupyter advisories for updates and patches addressing this issue.