CVE-2026-42557
jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami. Rated lower by GHSA (high), Red Hat (high).
Description
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook, jupyter-notebook, jupyterlab | 7.5.6 and 1 more |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | no fix listed |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | no fix listed |
| pip::GitHub Security Advisory pip | jupyterlab, notebook | 4.5.7 and 1 more |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
Show all 22 entries from 19 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyter-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyterlab | 4.5.7 |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | no fix listed |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | no fix listed |
| pip::GitHub Security Advisory pip | jupyterlab | 4.5.7 |
| pip::GitHub Security Advisory pip | notebook | 7.5.6 |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
| rapidfort debian 12 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort debian 13 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort fedora 43 | jupyterlab | 4.4.10-3.fc43 |
| rapidfort Oracle Linux 10 | jupyterlab | no fix listed |
| rapidfort ubuntu 20.04 | jupyterlab | no fix listed |
| rapidfort ubuntu 22.04 | jupyterlab | no fix listed |
| rapidfort ubuntu 24.04 | jupyterlab | no fix listed |
References
- https://access.redhat.com/errata/RHSA-2026:43038
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/security/cve/CVE-2026-42557
- https://bugzilla.redhat.com/show_bug.cgi?id=2477086
- https://github.com/jupyterlab/jupyterlab
- https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg
- https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-files
- https://nvd.nist.gov/vuln/detail/CVE-2026-42557