CVE-2025-54991

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-54991", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-08-04T17:34:24.420Z", "datePublished": "2026-11-06T20:28:05.517Z", "dateUpdated": "2026-11-09T13:22:31.447Z"}, "containers": {"cna": {"title": "JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)", "problemTypes": [{"descriptions": [{"cweId": "CWE-250", "lang": "en", "description": "CWE-250: Execution with Unnecessary Privileges", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-693", "lang": "en", "description": "CWE-693: Protection Mechanism Failure", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-8cvf-4977-r95v", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-8cvf-4977-r95v"}, {"name": "https://github.com/jupyterlab/jupyterlab-desktop/commit/302fb36caca62bbbba7bfaaf0a4966a38cbead44", "tags": ["x_refsource_MISC"], "url": "https://github.com/jupyterlab/jupyterlab-desktop/commit/302fb36caca62bbbba7bfaaf0a4966a38cbead44"}, {"name": "https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1", "tags": ["x_refsource_MISC"], "url": "https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1"}], "affected": [{"vendor": "jupyterlab", "product": "jupyterlab-desktop", "versions": [{"version": "< 4.6.2-1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-06T20:28:05.517Z"}, "descriptions": [{"lang": "en", "value": "JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the com.apple.security.cs.allow-dyld-environment-variables entitlement, allowing the dynamic linker to honor DYLD_INSERT_LIBRARIES despite the hardened runtime. An attacker who can already execute code as the current user can load an arbitrary dynamic library into the JupyterLab Desktop process and inherit TCC permissions previously granted to the application, including access to protected Documents, Desktop, or Downloads folders without another macOS prompt. Exploitation requires existing local code execution and prior TCC grants; it does not provide initial or remote code execution. Windows and Linux are not affected. This vulnerability is fixed in 4.6.2-1."}], "source": {"advisory": "GHSA-8cvf-4977-r95v", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T13:22:20.769074Z", "id": "CVE-2025-54991", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T13:22:31.447Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-54991", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T13:22:20.769074Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T13:22:27.653Z"}}], "cna": {"title": "JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)", "source": {"advisory": "GHSA-8cvf-4977-r95v", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "jupyterlab", "product": "jupyterlab-desktop", "versions": [{"status": "affected", "version": "< 4.6.2-1"}]}], "references": [{"url": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-8cvf-4977-r95v", "name": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-8cvf-4977-r95v", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/jupyterlab/jupyterlab-desktop/commit/302fb36caca62bbbba7bfaaf0a4966a38cbead44", "name": "https://github.com/jupyterlab/jupyterlab-desktop/commit/302fb36caca62bbbba7bfaaf0a4966a38cbead44", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1", "name": "https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the com.apple.security.cs.allow-dyld-environment-variables entitlement, allowing the dynamic linker to honor DYLD_INSERT_LIBRARIES despite the hardened runtime. An attacker who can already execute code as the current user can load an arbitrary dynamic library into the JupyterLab Desktop process and inherit TCC permissions previously granted to the application, including access to protected Documents, Desktop, or Downloads folders without another macOS prompt. Exploitation requires existing local code execution and prior TCC grants; it does not provide initial or remote code execution. Windows and Linux are not affected. This vulnerability is fixed in 4.6.2-1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-250", "description": "CWE-250: Execution with Unnecessary Privileges"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-693", "description": "CWE-693: Protection Mechanism Failure"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-06T20:28:05.517Z"}}}, "cveMetadata": {"cveId": "CVE-2025-54991", "state": "PUBLISHED", "dateUpdated": "2026-11-09T13:22:31.447Z", "dateReserved": "2025-08-04T17:34:24.420Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-06T20:28:05.517Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "jupyterlab-desktop", "vendor": "jupyterlab", "versions": [{"status": "affected", "version": "< 4.6.2-1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the com.apple.security.cs.allow-dyld-environment-variables entitlement, allowing the dynamic linker to honor DYLD_INSERT_LIBRARIES despite the hardened runtime. An attacker who can already execute code as the current user can load an arbitrary dynamic library into the JupyterLab Desktop process and inherit TCC permissions previously granted to the application, including access to protected Documents, Desktop, or Downloads folders without another macOS prompt. Exploitation requires existing local code execution and prior TCC grants; it does not provide initial or remote code execution. Windows and Linux are not affected. This vulnerability is fixed in 4.6.2-1."}, {"lang": "es", "value": "JupyterLab Desktop es la aplicaci\u00f3n de escritorio multiplataforma para JupyterLab. Versiones anteriores a la 4.6.2-1 de JupyterLab Desktop para macOS declaraban el derecho com.apple.security.cs.allow-dyld-environment-variables, permitiendo que el enlazador din\u00e1mico respetara DYLD_INSERT_LIBRARIES a pesar del entorno de ejecuci\u00f3n reforzado. Un atacante que ya puede ejecutar c\u00f3digo como el usuario actual puede cargar una biblioteca din\u00e1mica arbitraria en el proceso de JupyterLab Desktop y heredar los permisos TCC previamente otorgados a la aplicaci\u00f3n, incluido el acceso a las carpetas protegidas de Documentos, Escritorio o Descargas sin otra solicitud de macOS. La explotaci\u00f3n requiere la ejecuci\u00f3n de c\u00f3digo local existente y concesiones TCC previas; no proporciona ejecuci\u00f3n de c\u00f3digo inicial ni ejecuci\u00f3n remota de c\u00f3digo. Windows y Linux no se ven afectados. Esta vulnerabilidad se corrige en la versi\u00f3n 4.6.2-1."}], "id": "CVE-2025-54991", "lastModified": "2026-11-12T20:04:52.377", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-54991", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T13:22:20.769074Z", "version": "2.0.3"}}]}, "published": "2026-11-06T21:17:04.210", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/jupyterlab/jupyterlab-desktop/commit/302fb36caca62bbbba7bfaaf0a4966a38cbead44"}, {"source": "security-advisories@github.com", "url": "https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1"}, {"source": "security-advisories@github.com", "url": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-8cvf-4977-r95v"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-250"}, {"lang": "en", "value": "CWE-693"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,4.6.2-1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "jupyterlab-desktop", "source": "cna", "vendor": "jupyterlab"}, "product": "jupyterlab-desktop", "vendor": "jupyter"}], "created": "2026-11-06T21:38:24.318161+00:00", "updated": "2026-11-06T21:45:10.097372+00:00", "vendors": ["jupyter", "jupyter$PRODUCT$jupyterlab-desktop"]}