CVE-2026-102832
published 2026-10-13CVE-2026-102832: JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and…
PriorityP420medium4.2CVSS 3.1
AVNACHPRNUIRSUCLILAN
EPSS
0.14%
3.4th percentile
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracker.currentWidget to resolve the current Markdown viewer or notebook when the user answers rather than retaining the document whose command button was clicked. If another document becomes current while the prompt is open and the user chooses Trust, JupyterLab marks the second document trusted while leaving the clicked document untrusted. Later command buttons in the incorrectly trusted document run without a prompt, and trusting a notebook marks all cells trusted, saves unsaved edits, and persists the server signature to disk. Applications that bundle JupyterLab, including affected Notebook and JupyterLite releases, inherit the behavior. This issue is fixed in versions 4.5.11 and 4.6.4.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jupyter | notebook | >= 7.5.6 < 7.6.3 | 7.6.3 |
| jupyterlab | jupyterlab | — | — |
| jupyterlab | jupyterlab | — | — |
| jupyterlab | jupyterlab | >= 4.5.7 < 4.5.11 | 4.5.11 |
| jupyterlab | jupyterlab | >= 4.6.0 < 4.6.4 | 4.6.4 |
| jupyterlab | jupyterlite-core | — | — |
| jupyterlab | jupyterlite-core | >= 0.7.5 < 0.8.4 | 0.8.4 |
| jupyterlab | notebook | — | — |
| rhoai | odh-feature-server-rhel9 | — | — |
| rhoai | odh-th-torch-cpu-py312-rhel9 | — | — |
| rhoai | odh-th-torch-cuda-py312-rhel9 | — | — |
| rhoai | odh-th-torch-rocm-py312-rhel9 | — | — |
| rhoai | odh-th06-cpu-torch210-py312-rhel9 | — | — |
| rhoai | odh-th06-cpu-torch291-py312-rhel9 | — | — |
| rhoai | odh-th06-cuda130-torch210-py312-rhel9 | — | — |
| rhoai | odh-th06-cuda130-torch291-py312-rhel9 | — | — |
| rhoai | odh-th06-rocm64-torch291-py312-rhel9 | — | — |
| rhoai | odh-workbench-codeserver-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-minimal-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-minimal-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-minimal-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-rocm-py312-rhel9 | — | — |
CVSS provenance
nvdv3.14.2MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
vendor_redhat4.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
jupyterlab: JupyterLab: Improper trust assignment via active document switching
vendor_redhat·2026-10-13·CVSS 4.2
CVE-2026-102832 [MEDIUM] CWE-279 jupyterlab: JupyterLab: Improper trust assignment via active document switching
jupyterlab: JupyterLab: Improper trust assignment via active document switching
A flaw was found in JupyterLab. This vulnerability allows an untrusted document to gain trusted status without intended user authorization. When a trust confirmation prompt is displayed, switching the active document causes JupyterLab to grant trust to whichever document is currently focused rather than the document that triggered the prompt. Consequently, an attacker could convince a user to open an untrusted notebook that unintentionally receives trusted status, enabling embedded commands to execute without prompts.
Package: rhoai/odh-feature-server-rhel9 (Red Hat OpenShift AI (RHOAI)) - Fix deferred
Package: rhoai/odh-th06-cpu-torch210-py312-rhel9 (Red Hat OpenShift AI (RHOAI)) - Fix deferred
Package: rh
GHSA
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
ghsa·2026-10-15
CVE-2026-102832 [MEDIUM] CWE-367 JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
## Description
A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust. Choosing Trust runs the command and marks the document trusted, so its later buttons run without a prompt.
Which document gets marked is decided when the user answers, not when they click. Both trust commands read whichever document is current at that moment: `markdownviewer:trust` uses `tracker.currentWidget`, and `notebook:trust` uses the equivalent lookup. If another document becomes current while the prompt is open, that document is the one marked trusted, and the one the
No detection rules found.
No public exploits indexed.
https://github.com/jupyterlab/jupyterlab/commit/0fc18ab4ef67e431a8f6560e387193baf786c70ahttps://github.com/jupyterlab/jupyterlab/commit/b64bc88b8ca034cf158604a5cc48ca9170ea453bhttps://github.com/jupyterlab/jupyterlab/commit/f7e5f9803fdf2aaaa0e9bfb9cc73386a8cc5f0b2https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.11https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.4https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-jwrc-gm9j-263p
2026-10-13
Published