What is CVE-2025-32428?

CVE-2025-32428 is a vulnerability in Jupyterhub Jupyter-Remote-Desktop-Proxy, classified under Exposure of Resource to Wrong Sphere. Published 2025-04-15.

Is CVE-2025-32428 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Jupyterhub Jupyter-Remote-Desktop-Proxy

CVE-2025-32428

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still accessible via the network. This vulnerability does not affect users having TurboVNC as the vncserver executable. This issue is fixed in 3.0.1.

EPSS: 0.009 (56.1th percentile) — read the EPSS interpretation.

Affected products

Jupyterhub Jupyter-remote-desktop-proxy — versions >= 3.0.0, < 3.0.1

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

Public proof-of-concept exploits

tanjiti/sec_

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-32428?: CVE-2025-32428 is a vulnerability in Jupyterhub Jupyter-Remote-Desktop-Proxy, classified under Exposure of Resource to Wrong Sphere. Published 2025-04-15.
Is CVE-2025-32428 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.