JupyterLab Extension Uninstall Parameter Injection (CVE-2026-10294)

JupyterLab Extension Uninstall Parameter Injection Vulnerability (GHSA-3325-v43h-43vv) Vulnerability Overview The PyPI extension manager in JupyterLab fails to adequately validate extension names passed via the parameter in the request body when executing . An attacker can construct names starting with a hyphen (e.g., or ), causing the parameter to be interpreted by as a command-line option rather than a package name. This can lead to server-side file reading, internal URL probing, and file writing. CVSS Score: 5.4 / 10 (Medium) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:U/UI:N/S:U/C:L/I:N/A:N CVE ID: CVE-2026-10294 Affected Versions Affected Software: (pip) Affected Versions: Prerequisites: The (default) PyPI Extension Manager is enabled. Unauthenticated accounts are allowed to call the API. The kernel is disabled or delegated to a remote host (or users with kernel access can directly execute equivalent outbound requests). Specific Impacts: 1. File Reading: By using the parameter, attackers can read arbitrary files on the server (e.g., ). 2. Host and Port Probing: By using to accept a URL, attackers can initiate outbound requests to probe internal services or cloud instance metadata endpoints. 3. File Writing: By using the parameter, attackers can create files at specified paths (containing pip logs) or overwrite existing configuration files. Remediation Fixed Versions: Fix Description: The uninstall name is now validated as a valid PyPI package name within the HTTP handler and . Additionally, the command line now includes before package operation arguments to prevent option injection. Workaround If an immediate upgrade is not possible, switch to the read-only extension manager to disable programmatic installation and removal of extensions: Method 1: Command Line Argument Method 2: Jupyter Configuration Note: Once read-only mode is enabled, users will lose the ability to install and remove extensions via the extension manager. Extensions must then be installed by administrators within the environment. Relevant Code Snippet (Vulnerability Principle) The page displays the command construction logic that causes the vulnerability: Note: Since the variable comes directly from user input without filtering, parameter injection occurs.

Goal Reached Thanks to every supporter — we hit 100%!

JupyterLab Extension Uninstall Parameter Injection (CVE-2026-10294)

More from this source