NTLM Credential Theft in Python Windows Applications

This report discloses multiple NTLMv2 hash disclosure vulnerabilities in widely used Python frameworks (Gradio — CVE-2024-34510, Jupyter Server — CVE-2024-35178, Streamlit — CVE-2024-42474) that allow unauthenticated attackers to induce SMB callbacks from Windows hosts and capture or relay NTLMv2 hashes via crafted file paths or SSRF/XXE chaining; it includes technical root causes, exploitation scenarios (direct Internet exposure and indirect SSRF-based attacks), timelines, and recommended mitigations including patches and blocking outbound SMB.