CVE-2024-35178

CVE-2024-35178 is a high-severity vulnerability affecting Jupyter Server on Windows, allowing unauthenticated attackers to leak NTLMv2 password hashes. This flaw enables attackers to crack the password for access to the Windows machine hosting the server or perform NTLM relay attacks against other network resources. With a CVSS score of 7.5, the attack requires no user interaction and has low complexity, leading to high confidentiality impact. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential future exploitation.