Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-102832— JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked

Quick assessment

Affected
jupyterlab jupyterlab
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

JupyterLab 是一个基于 Jupyter Notebook 架构的可扩展交互式与可重复计算环境。在版本 4.5.7 至 4.5.11（不含 4.5.11 的更新补丁）以及 4.6.4 版本中， 和 命令链接处理器在用户响应信任提示时，使用了 来确定当前的 Markdown 查看器或笔记本，而不是保留最初触发命令按钮的那个文档。如果用户在提示框仍打开期间切换当前文档，并选择了“信任”，JupyterLab 会将第二个成为当前焦点的文档标记为可信，而最初被点击的文档则未被信任。此后，在错误地被信任的文档中执行后

CVSS 4.2 · Medium

Possible ATT&CK Techniques 1 AI

T1505.003 · Web Shell

Affected Version Matrix 4

VendorProduct Version RangeStatus
jupyterlab jupyterlab >= 4.5.7, < 4.5.11 affected
>= 4.6.0, < 4.6.4 affected
jupyterlab jupyterlite-core >= 0.7.5, < 0.8.4 affected
jupyterlab notebook >= 7.5.6, < 7.6.3 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-102832

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
Source: CVE Program / CVE List V5
Vulnerability Description
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracker.currentWidget to resolve the current Markdown viewer or notebook when the user answers rather than retaining the document whose command button was clicked. If another document becomes current while the prompt is open and the user chooses Trust, JupyterLab marks the second document trusted while leaving the clicked document untrusted. Later command buttons in the incorrectly trusted document run without a prompt, and trusting a notebook marks all cells trusted, saves unsaved edits, and persists the server signature to disk. Applications that bundle JupyterLab, including affected Notebook and JupyterLite releases, inherit the behavior. This issue is fixed in versions 4.5.11 and 4.6.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
jupyterlab jupyterlab >= 4.5.7, < 4.5.11 -
jupyterlab jupyterlite-core >= 0.7.5, < 0.8.4 -
jupyterlab notebook >= 7.5.6, < 7.6.3 -

II. Public POCs for CVE-2026-102832

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-102832

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-102832 (3)

Vendor Advisories for CVE-2026-102832 (1)

Vendor Pages for CVE-2026-102832 (2)

IV. Related Vulnerabilities

Same product: jupyterlab
Same vendor: jupyterlab
Same weakness: CWE-367

V. Comments for CVE-2026-102832

No comments yet

Leave a comment