CVE-2026-114140— nbconvert: File write via path traversal in cell output filenames
Quick assessment
Affected
jupyter nbconvert
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
nbconvert 工具（jupyter nbconvert）通过 Jinja 模板将 Jupyter 笔记本转换为多种其他格式。在 5.4.0 至 7.17.2 版本中，位于 nbconvert/preprocessors/extractoutput.py 的 ExtractOutputPreprocessor 会将攻击者控制的单元格输出元数据中的文件名直接拼接到 output_files_dir 上，而未将结果限制在目标目录内。当受害者使用 Markdown、LaTeX、reStructuredText 或 A
Possible ATT&CK Techniques 2 AI
T1566.001 · Spearphishing Attachment T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-114140
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
nbconvert: File write via path traversal in cell output filenames
Source: CVE Program / CVE List V5
Vulnerability Description
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to output_files_dir without limiting the result to the intended directory. When a victim converts a malicious notebook with the markdown, LaTeX, reStructuredText, or AsciiDoc exporter, path traversal in the output filename can write attacker-controlled output data to arbitrary locations accessible to the victim. Running the notebook cell again replaces the malicious output metadata, but merely converting the supplied notebook does not. This issue is fixed in version 7.17.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-114140
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-114140
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-114140 (1)
-
🔗 Merge commit from fork · jupyter/nbconvert@ce4bd99 · GitHub x_refsource_MISC
Vendor Advisories for CVE-2026-114140 (1)
Vendor Pages for CVE-2026-114140 (1)
-
🔗 Release v7.17.2 · jupyter/nbconvert · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same product: nbconvert
-
CVE-2026-39378
nbconvert has an Arbitrary File Read via Path Traversal in H -
CVE-2026-39377
nbconvert has an Arbitrary File Write via Path Traversal in -
CVE-2025-53000
nbconvert has an uncontrolled search path that leads to unau -
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multi
Same vendor: jupyter
-
CVE-2026-86258
nbviewer through 1.0.1 Path Traversal via LocalFileHandler -
CVE-2026-6658
Cross-site Scripting (XSS) in jupyter/nbconvert -
CVE-2026-6657
CORS Origin Validation Bypass in jupyter-server -
CVE-2026-5422
Path Traversal in jupyter/jupyter -
CVE-2026-40171
Jupyter Notebook and JupyterLab token theft via stored XSS i
Same weakness: CWE-22
-
CVE-2026-81163
Media Library Importer - Moderately critical - Access bypass -
CVE-2026-114377
leomoon-studios wiki-go Comment Deletion comments.go DeleteC -
CVE-2026-114376
leomoon-studios wiki-go API editor.go SourceHandler path tra -
CVE-2026-114375
leomoon-studios wiki-go Files Rename API files.go RenameFile -
CVE-2026-85518
Openscap: openscap: arbitrary file write via path traversal
V. Comments for CVE-2026-114140
No comments yet