PT-2026-30253 · Unknown · Jupyterhub+1

Yueyuel · CVE-2026-34052 · Published 2026-04-03 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LTI JupyterHub Authenticator versions prior to 1.6.3

Description The LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, allowing an attacker with a valid consumer key to send repeated requests with unique nonces, gradually exhausting server memory and causing a denial of service.

Recommendations Upgrade to version 1.6.3 or later.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Memory Leak

Weakness Enumeration

CWE-770

CWE-401

Related Identifiers

CLEANSTART-2026-AN27706

CVE-2026-34052

GHSA-8MXQ-7XR7-2FXJ

PYSEC-2026-2533

Affected Products

Jupyterhub

Ltiauthenticator

References · 53

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34052.json · Exploit
• https://github.com/jupyterhub/ltiauthenticator/security/advisories/GHSA-8mxq-7xr7-2fxj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34520 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44431 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22815 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32597 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-AN27706 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34525 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34518 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34052 · Security Note
• https://osv.dev/vulnerability/GHSA-8mxq-7xr7-2fxj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34519 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33175 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44432 · Security Note