{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-86049.json"}],"title":"jupyter-server: Jupyter Server: Information disclosure via 5xx request logging","tracking":{"current_release_date":"2026-09-22T22:26:50+00:00","generator":{"date":"2026-09-22T22:26:50+00:00","engine":{"name":"Red Hat SDEngine","version":"5.4.0"}},"id":"CVE-2026-86049","initial_release_date":"2026-09-17T20:28:52.154000+00:00","revision_history":[{"date":"2026-09-17T20:28:52.154000+00:00","number":"1","summary":"Initial version"},{"date":"2026-09-22T20:51:01+00:00","number":"2","summary":"Current version"},{"date":"2026-09-22T22:26:50+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Migration Toolkit for Applications 8","product":{"name":"Migration Toolkit for Applications 8","product_id":"migration_toolkit_for_applications_8","product_identification_helper":{"cpe":"cpe:/a:redhat:migration_toolkit_applications:8"}}}],"category":"product_family","name":"Migration Toolkit for Applications 8"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift AI (RHOAI)","product":{"name":"Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai)","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift_ai"}}}],"category":"product_family","name":"Red Hat OpenShift AI (RHOAI)"},{"category":"product_version","name":"mta/mta-solution-server-rhel9","product":{"name":"mta/mta-solution-server-rhel9","product_id":"mta/mta-solution-server-rhel9","product_identification_helper":{"purl":"pkg:oci/mta-solution-server-rhel9@sha256:52cfae6d1aedcc12935b696e00cd4c83c415d7dca6ad0c6289e92692a594aab0?repository_url=registry.redhat.io/mta/mta-solution-server-rhel9"}}},{"category":"product_version","name":"rhoai/odh-feature-server-rhel9","product":{"name":"rhoai/odh-feature-server-rhel9","product_id":"rhoai/odh-feature-server-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-feature-server-rhel9@sha256:c5dd868cd66e7911969f60658d31b3714ed42f0e81b9512f89991a412bcb0fa9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th06-cpu-torch210-py312-rhel9","product":{"name":"rhoai/odh-th06-cpu-torch210-py312-rhel9","product_id":"rhoai/odh-th06-cpu-torch210-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256:cdd7d9f982c1f8a94dd4aad43e705274aae1bf0942e0442e60c3973f9c198f23?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th06-cpu-torch291-py312-rhel9","product":{"name":"rhoai/odh-th06-cpu-torch291-py312-rhel9","product_id":"rhoai/odh-th06-cpu-torch291-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th06-cpu-torch291-py312-rhel9@sha256:f41414d319c2af4a36ff991b4905dd17aaeec2db0ca0af4dd5d76501b28bbb15?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch291-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th06-cuda130-torch210-py312-rhel9","product":{"name":"rhoai/odh-th06-cuda130-torch210-py312-rhel9","product_id":"rhoai/odh-th06-cuda130-torch210-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th06-cuda130-torch210-py312-rhel9@sha256:ea69ab01a3aaeba9b4db8abbace9014a3044e0f0f13fb7aaaef93acf72f50248?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th06-cuda130-torch291-py312-rhel9","product":{"name":"rhoai/odh-th06-cuda130-torch291-py312-rhel9","product_id":"rhoai/odh-th06-cuda130-torch291-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th06-cuda130-torch291-py312-rhel9@sha256:4a92ec3c409a7c6ef662a2fe902e8bfff42392385f668e20fc4825d03bc838cd?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch291-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th06-rocm64-torch291-py312-rhel9","product":{"name":"rhoai/odh-th06-rocm64-torch291-py312-rhel9","product_id":"rhoai/odh-th06-rocm64-torch291-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th06-rocm64-torch291-py312-rhel9@sha256:b2a253f3dc063a8e1cee441640cce13fcf04918ce453be8f5d488301b1458a91?repository_url=registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th-torch-cpu-py312-rhel9","product":{"name":"rhoai/odh-th-torch-cpu-py312-rhel9","product_id":"rhoai/odh-th-torch-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th-torch-cpu-py312-rhel9@sha256:d265d1398bceb2d971d725e27e81c8def1213b2f0dc265a37707b2f4270317ca?repository_url=registry.redhat.io/rhoai/odh-th-torch-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th-torch-cuda-py312-rhel9","product":{"name":"rhoai/odh-th-torch-cuda-py312-rhel9","product_id":"rhoai/odh-th-torch-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:efd7b3607b699092c68359d20ef0d0043114191a097637667c0d2cf78fbea702?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-th-torch-rocm-py312-rhel9","product":{"name":"rhoai/odh-th-torch-rocm-py312-rhel9","product_id":"rhoai/odh-th-torch-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-th-torch-rocm-py312-rhel9@sha256:d970a69a0c5372b2540fa07083b2d7fc6bc86dee4f0c538285638ff9d7661315?repository_url=registry.redhat.io/rhoai/odh-th-torch-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:7b24ef41420bc79e19ff6349bb4760b2834bdc245eeb0b9191a8e77d90515a3a?repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:206018cabeb3389fcfb554cb1850c82e509483a2f98bf963d82031303adaaee5?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256:1e8c79265d905315b4e9e11185f8abac06823eb2441bc4e7466bad4e48c84f16?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-minimal-cuda-py312-rhel9@sha256:7f754ac3b52ec1667609acc3bdfbc1f3a4903d5bc2faac2bee026dd6b472728b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-minimal-rocm-py312-rhel9@sha256:676c72f4b63e466e85b83ee26433564d3d17cc5eb3d617b22a4f2ac746fa3174?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:f476e56ad00faaad5f2e26010f633233db2d4b299d7c5281e2f4ac46949b531b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9@sha256:bea01cf15e94ac8e78f868c8a600ed77d98266aad0673d6e9756e3cc0c70f60c?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:0708626cd3b96dfb6a7bef4085872dc131b64340112c40f7c70e7139882e5412?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a9919e8b5cedd66870a6d6f464883ea3182ac749a72bb590e0298d3ae8a4f78a?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256:a7576aa1cc937aed60998024b5c3107848ef30d3a4e8129c75815a0efd71b09d?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:90da115e64c80fbf57802442848ff8eee18d8c38e6e30edfdb374bb94dd84735?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"}}}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"mta/mta-solution-server-rhel9 as a component of Migration Toolkit for Applications 8","product_id":"migration_toolkit_for_applications_8:mta/mta-solution-server-rhel9"},"product_reference":"mta/mta-solution-server-rhel9","relates_to_product_reference":"migration_toolkit_for_applications_8"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9"},"product_reference":"rhoai/odh-feature-server-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9"},"product_reference":"rhoai/odh-th-torch-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9"},"product_reference":"rhoai/odh-th-torch-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th-torch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-rocm-py312-rhel9"},"product_reference":"rhoai/odh-th-torch-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9"},"product_reference":"rhoai/odh-th06-cpu-torch210-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th06-cpu-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9"},"product_reference":"rhoai/odh-th06-cpu-torch291-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9"},"product_reference":"rhoai/odh-th06-cuda130-torch210-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9"},"product_reference":"rhoai/odh-th06-cuda130-torch291-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9"},"product_reference":"rhoai/odh-th06-rocm64-torch291-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"}]},"vulnerabilities":[{"cve":"CVE-2026-86049","cwe":{"id":"CWE-117","name":"Improper Output Neutralization for Logs"},"discovery_date":"2026-09-22T20:43:39.821590+00:00","ids":[{"system_name":"Red Hat Bugzilla ID","text":"2538810"}],"notes":[{"category":"description","text":"A flaw was found in Jupyter Server. The server's logging mechanism for HTTP 500 errors fails to properly redact sensitive information. When a request results in an HTTP 500 error and includes a Referer header containing a security token, this token is written to server logs in plaintext. An attacker with access to these logs could retrieve the token, potentially gaining unauthorized access to the affected user's Jupyter Server permissions.","title":"Vulnerability description"},{"category":"summary","text":"jupyter-server: Jupyter Server: Information disclosure via 5xx request logging","title":"Vulnerability summary"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"known_affected":["migration_toolkit_for_applications_8:mta/mta-solution-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-86049"},{"category":"external","summary":"RHBZ#2538810","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538810"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-86049","url":"https://www.cve.org/CVERecord?id=CVE-2026-86049"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-86049","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86049"},{"category":"external","summary":"https://github.com/jupyter-server/jupyter_server/commit/52513529af7096e622c00911b17627b266294717","url":"https://github.com/jupyter-server/jupyter_server/commit/52513529af7096e622c00911b17627b266294717"},{"category":"external","summary":"https://github.com/jupyter-server/jupyter_server/pull/1681","url":"https://github.com/jupyter-server/jupyter_server/pull/1681"},{"category":"external","summary":"https://github.com/jupyter-server/jupyter_server/releases/tag/v2.21.0","url":"https://github.com/jupyter-server/jupyter_server/releases/tag/v2.21.0"},{"category":"external","summary":"https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-c3mw-737p-c7g2","url":"https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-c3mw-737p-c7g2"}],"release_date":"2026-09-17T20:28:52.154000+00:00","remediations":[{"category":"no_fix_planned","details":"Out of support scope","product_ids":["migration_toolkit_for_applications_8:mta/mta-solution-server-rhel9"]},{"category":"none_available","details":"Affected","product_ids":["red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]}],"scores":[{"cvss_v3":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"products":["migration_toolkit_for_applications_8:mta/mta-solution-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]}],"threats":[{"category":"impact","details":"Moderate","product_ids":["migration_toolkit_for_applications_8:mta/mta-solution-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]}],"title":"jupyter-server: Jupyter Server: Information disclosure via 5xx request logging"}]}