JupyterLab CVE-2026-73417
HIGH
GHSA-pppj-hq3g-57pj
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary import vector needs no attacker privileges (PR:N) but requires victim to import file (UI:R); C:H/I:H reflects full notebook, file, and kernel access.
Primary rating from Vendor (github).
CVSS VectorVendor: github
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3Blast Radius
ecosystem impact- 5 pypi packages depend on jupyterlab (2 direct, 3 indirect)
Ecosystem-wide dependent count for version 4.6.0.
DescriptionCVE.org
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings Editor. In packages/notebook-extension/schema/tracker.json and packages/notebook-extension/src/index.ts, the sideBySideLeftMarginOverride and sideBySideRightMarginOverride settings are not properly validated before being inserted into style content, allowing a crafted settings file to contain instructions that execute as code instead of only changing display preferences. A user can import the malicious file, or an attacker with access to a shared settings location can plant an overrides.json that is applied automatically. The embedded code runs with the affected user's access and can read or modify notebooks and files and run code through the notebook server, including on a connected kernel. This issue is fixed in versions 4.5.10 and 4.6.2.
AnalysisAI
Cross-site scripting in JupyterLab 3.3.0 through 4.5.9 and 4.6.0 through 4.6.1 enables arbitrary code execution in a victim's browser session through a crafted overrides.json settings file. The sideBySideLeftMarginOverride and sideBySideRightMarginOverride notebook extension settings are inserted unsanitized into CSS style content, allowing a payload to execute with full JupyterLab API access - enabling notebook reads/writes and arbitrary kernel command execution under the victim's credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Primary vector (PR:N, UI:A): The victim must actively import a crafted overrides.json file via the Import button in JupyterLab's Settings Editor. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L is internally consistent with the two described attack paths. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a malicious overrides.json embedding a JavaScript payload in the sideBySideLeftMarginOverride or sideBySideRightMarginOverride setting values and delivers it to a target JupyterLab user framed as a benign display-preferences file via email, chat, or a shared repository. When the victim imports it through the Settings Editor Import button, the unsanitized value is injected into CSS style content in the browser, executing the script in the victim's session where it silently reads and modifies notebooks, exfiltrates files, and runs arbitrary commands through the connected kernel under the victim's credentials. … |
| Remediation | Upgrade to JupyterLab 4.5.10 or 4.6.2 immediately; both are vendor-released patches confirmed by GitHub security advisory GHSA-pppj-hq3g-57pj and the corresponding release tags at https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10 and https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2, with fix commits in PRs https://github.com/jupyterlab/jupyterlab/pull/19184 and https://github.com/jupyterlab/jupyterlab/pull/19185. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all JupyterLab and JupyterHub instances in your environment and document their versions (prioritize versions 3.3.0-4.5.9 and 4.6.0-4.6.1). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allVendor StatusVendor
SUSE
Severity: ModerateShare
External POC / Exploit Code
Leaving vuln.today