JupyterLab Desktop: XSS and one-click token-leak RCE (CVE-2026-102530 / CVE-2026-86044) plus macOS TCC bypasses — fixed in 4.6.2-1
JupyterLab Desktop (jupyterlab/jupyterlab-desktop)
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
NVD published four JupyterLab Desktop CVEs on 2026-11-06 for issues patched in the Jul 22 2026 v4.6.2-1 security release (first Desktop release in two years). Two are critical remote code execution: CVE-2026-102530 (CVSS 9.4) — unsanitized remote-server URLs in the Connect dialog / Welcome view enable XSS that abuses the privileged Electron IPC bridge; and CVE-2026-86044 (CVSS 9.6) — a MathJax link in an untrusted notebook plus a getServerInfo IPC leak lets one click hand the local Jupyter server token to an attacker site for RCE (requires JupyterLab < 4.4.8 in the managed environment). Two medium macOS-only TCC bypasses (CVE-2025-54991 / CVE-2025-55002, CVSS 5.5) need existing local code execution. Affected: Desktop <= v4.2.5-1. Upgrade to 4.6.2-1.
Why this severity: CVE-2026-86044 CVSS 9.6 and CVE-2026-102530 CVSS 9.4 (NVD Received 2026-11-06); macOS TCC pair CVSS 5.5; patched since Jul 2026 v4.6.2-1; no exploitation reported in advisories
- Started
- Jul 22, 2026
Affected
- JupyterLab Desktop <= v4.2.5-1
- CVE-2026-86044 also requires JupyterLab < 4.4.8 in the Desktop-managed local environment
- CVE-2025-54991 / CVE-2025-55002: macOS only
Fixed in
- JupyterLab Desktop 4.6.2-1
- Partial workaround for CVE-2026-86044: upgrade JupyterLab in-environment to >= 4.4.8
Timeline3
NVD receives CVE-2026-102530 (CVSS 9.4), CVE-2026-86044 (CVSS 9.6), CVE-2025-54991 and CVE-2025-55002 (both CVSS 5.5) from security-advisories@github.com, linking the Jul 2026 Desktop security release.
GitHub Security Advisories published for the four Desktop issues (CVE assignment noted as pending at the time for the two critical RCE advisories).
JupyterLab Desktop v4.6.2-1 released with patches for GHSA-vrj4-r4fw-9rfh (XSS→RCE via Connect URL), GHSA-2mr8-962v-wc67 (one-click token leak→RCE), GHSA-8cvf-4977-r95v (CVE-2025-54991 TCC), and GHSA-5c3f-5gj7-p9xh (CVE-2025-55002 TCC).
Advisories7
- GHSA-vrj4-r4fw-9rfh: Connect URL XSS leading to RCEGitHub · Jul 24, 2026
- GHSA-2mr8-962v-wc67: one-click server token leak leading to RCEGitHub · Jul 24, 2026
- GHSA-8cvf-4977-r95v / CVE-2025-54991: macOS TCC bypass via entitlementsGitHub · Jul 24, 2026
- GHSA-5c3f-5gj7-p9xh / CVE-2025-55002: macOS TCC bypass via Node fusesGitHub · Jul 24, 2026
- JupyterLab Desktop v4.6.2-1 releaseGitHub · Jul 22, 2026
- NVD: CVE-2026-102530NVD · Nov 6, 2026
- NVD: CVE-2026-86044NVD · Nov 6, 2026
News & write-ups1
Get an email when a new major security incident drops. No spam, unsubscribe any time.
