PT-2026-38419 · Open Notebook · Open Notebook

Cert-Eu · Published 2026-05-07 · Updated 2026-05-07 · CVE-2026-33588

Mitre

CVSS v4.0

7.0

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-33588

Affected Products

Open Notebook

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-33588 · Security Note
• https://github.com/lfnovo/open-notebook/security/advisories/GHSA-x4q2-89g5-594v · Vendor Advisory