CVE-2026-42557
jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Bitnami. Más baja según GHSA (alta), Red Hat (alta).
Descripción
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook, jupyter-notebook, jupyterlab | 7.5.6 y 1 más |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | sin corrección indicada |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | sin corrección indicada |
| pip::GitHub Security Advisory pip | jupyterlab, notebook | 4.5.7 y 1 más |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
Mostrar las 22 entradas de 19 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyter-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyterlab | 4.5.7 |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | sin corrección indicada |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | sin corrección indicada |
| pip::GitHub Security Advisory pip | jupyterlab | 4.5.7 |
| pip::GitHub Security Advisory pip | notebook | 7.5.6 |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
| rapidfort debian 12 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort debian 13 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort fedora 43 | jupyterlab | 4.4.10-3.fc43 |
| rapidfort Oracle Linux 10 | jupyterlab | sin corrección indicada |
| rapidfort ubuntu 20.04 | jupyterlab | sin corrección indicada |
| rapidfort ubuntu 22.04 | jupyterlab | sin corrección indicada |
| rapidfort ubuntu 24.04 | jupyterlab | sin corrección indicada |
Referencias
- https://access.redhat.com/errata/RHSA-2026:43038
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/security/cve/CVE-2026-42557
- https://bugzilla.redhat.com/show_bug.cgi?id=2477086
- https://github.com/jupyterlab/jupyterlab
- https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg
- https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-files
- https://nvd.nist.gov/vuln/detail/CVE-2026-42557