CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installation but passes uninstall names to PyPIExtensionManager.uninstall and python -m pip uninstall without rejecting option-like values. The security impact requires that the PyPI Extension Manager is enabled, the account can call the extension API, and kernels and terminals are disabled or delegated to remote hosts; otherwise the user can already read files and make outbound requests directly. An authenticated user with extension API access can supply a pip requirements option to make the server read a local file or fetch an internal URL, and reflected parse errors can return the first unparsable line or response content. A pip log option can also create or corrupt a chosen path with pip-generated log text, but the requester cannot select an arbitrary disclosed line or arbitrary file content, and the injection does not add code execution or availability impact beyond ordinary package removal. This issue is fixed in JupyterLab 4.5.11 and 4.6.4.

• CWE-88
• CWE-209
• CWE-918

• https://github.com/jupyterlab/jupyterlab/commit/a274a8276b9185d03efd4c3c20713d3137ac49e6
• https://github.com/jupyterlab/jupyterlab/commit/e277bc958e737130ac47b6c5078d08b29298828f
• https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.11
• https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.4
• https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-3325-v43h-43rv

Published

Sep 29, 2026

Last Modified

Sep 30, 2026

Status

Awaiting Analysis

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102893Zulip is an open-source team collaboration tool. In Zulip Se…9.1
• CVE-2026-102894GPUStack is an open-source GPU cluster manager for AI model …9.1
• CVE-2026-102895GPUStack is an open-source GPU cluster manager for AI model …9.8
• CVE-2026-102899Sentry is an application monitoring and error tracking platf…7.6
• CVE-2026-1029IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2…5.4
• CVE-2026-10290A weakness has been identified in code-projects Hotel and To…7.3
• CVE-2026-102905The The Ad Inserter – Ad Manager & AdSense Ads plugin for Wo…6.5
• CVE-2026-102906A vulnerability was identified in 0xshariq github-mcp-server…6.3
• CVE-2026-102908A vulnerability was determined in SourceCodester Online Revi…7.3
• CVE-2026-102909A vulnerability was identified in SourceCodester Online Revi…7.3
• CVE-2026-10291A security vulnerability has been detected in Enderfga claw-…5.3
• CVE-2026-102910A security flaw has been discovered in SourceCodester Online…7.3