CVE-2026-39378
published 2026-04-21CVE-2026-39378: The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when…
PriorityP339medium6.5CVSS 3.1
AVNACLPRNUIRSUCHINAN
EPSS
0.31%
22.9th percentile
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enable `HTMLExporter.embed_images`; it is not enabled by default.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jupyter | nbconvert | — | — |
| jupyter | nbconvert | >= 6.5.0 < 7.17.1 | 7.17.1 |
| jupyter | nbconvert | >= 6.5.0 < 7.17.1 | 7.17.1 |
| rhoai | odh-pipeline-runtime-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-minimal-cpu-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-pytorch-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-pytorch-rocm-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-minimal-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-minimal-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-minimal-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-trustyai-cpu-py312-rhel9 | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
ghsa·2026-04-21
CVE-2026-39378 [MEDIUM] CWE-22 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
## Summary
When `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML.
## Patches
Upgrade to nbconvert 7.17.1
## Workarounds
Do not enable `HTMLExporter.embed_images` (it is not enabled by default).
Red Hat
nbconvert: nbconvert: Sensitive file exfiltration via path traversal in image references
vendor_redhat·2026-04-21·CVSS 6.5
CVE-2026-39378 [MEDIUM] CWE-22 nbconvert: nbconvert: Sensitive file exfiltration via path traversal in image references
nbconvert: nbconvert: Sensitive file exfiltration via path traversal in image references
A flaw was found in nbconvert, a tool used to convert Jupyter notebooks. A malicious notebook can exploit this vulnerability when the `HTMLExporter.embed_images` setting is enabled. This allows for path traversal in image references, which can lead to arbitrary file read. Consequently, sensitive files from the conversion host could be exposed by embedding them as base64 data in the output HTML.
Statement: This Moderate impact flaw in nbconvert allows for sensitive file exfiltration through path traversal in image references. The vulnerability is exploitable only when the `HTMLExporter.embed_images` setting is explicitly enabled. This setting is not enabled by default in the nbconvert.
Mitigation: To
No detection rules found.
No public exploits indexed.
2026-04-21
Published