CVE-2026-34052

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a denial of service. This issue has been patched in version 1.6.3.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/jupyterhub/ltiauthenticator/releases/tag/1.6.3	Product
https://github.com/jupyterhub/ltiauthenticator/security/advisories/GHSA-8mxq-7xr7-2fxj	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jupyter:lti_jupyterhub_authenticator:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-04-03 23:17

Updated : 2026-07-24 22:10

NVD link : CVE-2026-34052

Mitre link : CVE-2026-34052

CVE.ORG link : CVE-2026-34052

JSON object : View

Products Affected

jupyter

lti_jupyterhub_authenticator

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2026-34052", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34052", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-06T18:58:43.478477Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "jupyterhub", "product": "ltiauthenticator", "versions": [{"status": "affected", "version": "< 1.6.3"}]}]}], "published": "2026-04-03T23:17:03.777", "references": [{"url": "https://github.com/jupyterhub/ltiauthenticator/releases/tag/1.6.3", "tags": ["Product"], "source": "security-advisories@github.com"}, {"url": "https://github.com/jupyterhub/ltiauthenticator/security/advisories/GHSA-8mxq-7xr7-2fxj", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-401"}, {"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a denial of service. This issue has been patched in version 1.6.3."}, {"lang": "es", "value": "Autenticador LTI JupyterHub es un autenticador de JupyterHub para LTI. Antes de la versi\u00f3n 1.6.3, el validador LTI 1.1 almacena nonces de OAuth en un diccionario a nivel de clase que crece sin l\u00edmites. Los nonces se a\u00f1aden antes de la validaci\u00f3n de la firma, por lo que un atacante con conocimiento de una clave de consumidor v\u00e1lida puede enviar solicitudes repetidas con nonces \u00fanicos para agotar gradualmente la memoria del servidor, causando una denegaci\u00f3n de servicio. Este problema ha sido parcheado en la versi\u00f3n 1.6.3."}], "lastModified": "2026-07-24T22:10:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jupyter:lti_jupyterhub_authenticator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD8F0C3C-6B43-4A7A-B3DE-8585DB1B5668", "versionEndExcluding": "1.6.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}