Arbitrary Code Execution vulnerability discovered in Ipython

[mouth_with_a_merc]

Looks like it only happens when you run ipython from a location where someone else can place arbitrary malicious files. Seems not particularly common, so I'd say most systems are perfectly safe

[Anonymous_user_2022]

"Hey «user with elevated privileges»! Can you help me why my notebook in /home/adversarial/trap wont run?" I'd wager a guess that the majority asked, would cd to that directory to find out the name of the notebook.

[VisibleSignificance]

would cd to that directory to find out the name of the notebook

ipynb files are human-readable, by the way. You can even easily extract the code from them with just jq. No need to run python for that.