CVE Feed

    Dashboard / CVE / CVE-2026-42557

    CVE-2026-42557

    jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.

    Published:May 13, 2026
    Last Modified:Aug 28, 2026
    EPS:May 13, 2026
    EPSS Score:0.00349
    CVSS Score:9.6

    Affected Products

    Vendor
    Jupyter
    Product
    Jupyterlab
    Vendor
    Jupyter
    Product
    Notebook

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-73417 (CVSS 8.6) — jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Noteb…
    CVE-2026-73416 (CVSS 6.1) — jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Noteb…
    CVE-2026-73627 (CVSS 6) — JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lo…
    CVE-2026-73626 (CVSS 7.7) — JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensio…
    CVE-2026-73415 (CVSS 7.5) — jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Noteb…
    CVE-2026-67338 (CVSS 5.1) — JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fai…
    CVE-2026-54528 (CVSS 7.1) — JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase() i…
    CVE-2026-54527 (CVSS 9.3) — JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHead…
    CVE-2026-42266 (CVSS 8.8) — JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Noteb…
    CVE-2026-40171 (CVSS 8.4) — In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High