AIKIDO-2026-177180

jupyterlab is vulnerable to Argument Injection

Argument InjectionGHSA-3325-v43h-43rv Published 5 days ago

Medium Risk

This Affects:

jupyterlab

4.0.0 - 4.5.10

Fixed in 4.5.11

4.6.0 - 4.6.3

Fixed in 4.6.4

Are you affected? Scan for Free

TL;DR

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken directly from the request body, and ExtensionHandler.post validates that name for cmd=install but not for cmd=uninstall. An extension name starting with -, such as -r followed by a path, reaches the pip command line as an option instead of a package name, letting pip open that path as a requirements file or make an outbound request to a supplied index URL. pip's parse error is returned in the response body, disclosing the file content or requested URL to the caller. The fix validates and terminates the argument list before invoking pip.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you run the PyPI Extension Manager with kernels and terminals disabled or delegated to remote hosts.