{"uuid": "d66aa7c2-090e-4230-831e-81690df0734b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41034", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/vscode_ipynb_remote_dev_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die\", \"Zemnmez\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"VSCode when opening an Jupyter notebook (.ipynb) file bypasses the trust model.\\n          On versions v1.4.0 - v1.71.1, its possible for the Jupyter notebook to embed\\n          HTML and javascript, which can then open new terminal windows within VSCode.\\n          Each of these new windows can then execute arbitrary code at startup.\\n\\n          During testing, the first open of the Jupyter notebook resulted in pop-ups\\n          displaying errors of unable to find the payload exe file. The second attempt\\n          at opening the Jupyter notebook would result in successful exeuction.\\n\\n          Successfully tested against VSCode 1.70.2 on Windows 10.\", \"disclosure_date\": \"2022-11-22\", \"fullname\": \"exploit/multi/misc/vscode_ipynb_remote_dev_exec\", \"is_install_path\": true, \"mod_time\": \"2026-05-14 11:43:36 +0000\", \"name\": \"VSCode ipynb Remote Development RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\", \"first-attempt-fail\"], \"SideEffects\": [\"screen-effects\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/misc/vscode_ipynb_remote_dev_exec.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/misc/vscode_ipynb_remote_dev_exec\", \"references\": [\"GHSA-pw56-c55x-cm9m\", \"CVE-2022-41034\", \"URL-https://github.com/andyhsu024/CVE-2022-41034\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows\", \"Linux File-Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:26.906836Z"}