{"cve":"CVE-2022-21699","nvd":{"published":"2022-01-19T22:15:09.470","modified":"2026-06-17T04:26:47.400","status":"Modified","description":"IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","score":8.8},"cwes":["CWE-269","CWE-250","CWE-279"],"references":["https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668","https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x","https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699","https://lists.debian.org/debian-lts-announce/2022/01/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRQRTWHYXMLDJ572VGVUZMUPEOTPM3KB/"],"products":["debian:debian_linux","fedoraproject:fedora","ipython:ipython"],"source":"nvd","synced_at":"2026-10-19T21:27:20.926095847+00:00"},"epss":{"cve":"CVE-2022-21699","score":0.00652,"percentile":0.51247,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-pq7m-3gw7-gq5x","url":"https://osv.dev/vulnerability/GHSA-pq7m-3gw7-gq5x","summary":"Execution with Unnecessary Privileges in ipython","modified":"2026-09-10T03:49:11.109020060Z","packages":[{"ecosystem":"PyPI","name":"ipython","purl":"pkg:pypi/ipython","ranges":["<5.11"],"fixed":["5.11"]},{"ecosystem":"PyPI","name":"ipython","purl":"pkg:pypi/ipython","ranges":[">=6.0.0 <7.16.3"],"fixed":["7.16.3"]},{"ecosystem":"PyPI","name":"ipython","purl":"pkg:pypi/ipython","ranges":[">=7.17.0 <7.31.1"],"fixed":["7.31.1"]},{"ecosystem":"PyPI","name":"ipython","purl":"pkg:pypi/ipython","ranges":[">=8.0.0 <8.0.1"],"fixed":["8.0.1"]}]},{"id":"PYSEC-2022-12","url":"https://osv.dev/vulnerability/PYSEC-2022-12","summary":"","modified":"2023-11-08T04:08:08.617915Z","packages":[{"ecosystem":"PyPI","name":"ipython","purl":"pkg:pypi/ipython","ranges":["<6.0.0rc1",">=6.0.0 <7.16.3",">=7.17.0 <7.31.1",">=8.0.0 <8.0.1"],"fixed":["6.0.0rc1","7.16.3","7.31.1","8.0.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}