CVE-2026-86044

JupyterLab Desktop is the cross-platform desktop application for JupyterLab.

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to the renderer without confirming that the current page still had the local Jupyter server origin. In a local managed session using JupyterLab before 4.4.8, an attacker can place a crafted MathJax link in an untrusted notebook. If a victim opens the notebook and clicks the link, the existing renderer navigates to an attacker-controlled site…

6. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-86044