PT-2026-38276 · Project Jupyter · Jupyter Notebook+1

Published

2026-05-06

·

Updated

2026-05-15

·

CVE-2026-42557

CVSS v3.1

9.6

Critical

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions JupyterLab versions prior to 4.5.7 Jupyter Notebook versions prior to 7.5.6
Description The HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements. Because CommandLinker listens for all click events on document.body and executes named commands without verifying if the element originated from a trusted UI, a notebook with pre-saved HTML cell output containing a deceptive button can trigger arbitrary commands. This can lead to arbitrary code execution, file deletion, or server denial of availability by opening multiple kernels or terminals upon a single user click. In Chromium-based browsers, multi-click attacks combined with clipboard access may allow full terminal access. The attack surface may increase in environments with third-party frontend extensions that provide additional commands.
Recommendations Update to version 4.5.7 or newer. Update to version 7.5.6 or newer. For downstream applications inheriting from JupyterFrontEnd or JupyterLab, disable CommandLinker by passing the commandLinker: new CommandLinker({ commands: new CommandRegistry() }) option during initialization. Disable the command linker functionality via overrides.json by setting @jupyterlab/apputils-extension:sanitizer with allowCommandLinker set to false.

Fix

XSS

Weakness Enumeration

Related Identifiers

BIT-JUPYTER-BASE-NOTEBOOK-2026-42557
BIT-JUPYTER-NOTEBOOK-2026-42557
BIT-JUPYTERLAB-2026-42557
CVE-2026-42557
GHSA-MQCG-5X36-VFCG
OPENSUSE-SU-2026:10748-1
OPENSUSE-SU-2026:10749-1

Affected Products

Jupyter Notebook
Jupyterlab