CVE-2026-73626

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-73626", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-08-13T11:17:25.160Z", "datePublished": "2026-08-13T11:28:25.551Z", "dateUpdated": "2026-08-28T13:45:55.401Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-08-28T13:45:55.401Z"}, "datePublic": "2026-07-21T00:00:00.000Z", "title": "JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager", "descriptions": [{"lang": "en", "value": "JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install(). The stock JupyterLab HTTP API and Extension Manager UI are not affected, as they perform a separate, correctly awaited check. The issue affects only deployments where a custom extension or downstream integration imports PyPIExtensionManager and calls install() directly with a package name influenced by untrusted input, an allowlist/blocklist is configured, the PyPI Extension Manager is enabled, and kernels and terminals are disabled or delegated to remote hosts. Fixed in JupyterLab 4.6.2 and 4.5.10."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Access Control", "cweId": "CWE-284", "type": "CWE"}]}], "affected": [{"vendor": "jupyterlab", "product": "jupyterlab", "defaultStatus": "unaffected", "packageURL": "pkg:pypi/jupyterlab", "versions": [{"version": "4.6.0", "status": "affected", "versionType": "semver", "lessThan": "4.6.1"}, {"version": "4.6.1", "status": "unaffected", "versionType": "semver"}]}, {"vendor": "jupyterlab", "product": "jupyterlab", "defaultStatus": "unaffected", "packageURL": "pkg:pypi/jupyterlab", "versions": [{"version": "0", "status": "affected", "versionType": "semver", "lessThan": "4.5.10"}, {"version": "4.5.10", "status": "unaffected", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:jupyter:jupyterlab:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6.0", "versionEndExcluding": "4.6.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:jupyter:jupyterlab:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.5.10"}]}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 7.7, "baseSeverity": "HIGH"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "references": [{"url": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-whvh-wf3x-g77j)"}, {"name": "VulnCheck Advisory: JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/jupyterlab-before-authentication-bypass-via-pypiextensionmanager"}], "credits": [{"lang": "en", "value": "de3erve-hunter", "type": "reporter"}, {"lang": "en", "value": "MUFFANUJ", "type": "finder"}, {"lang": "en", "value": "krassowski", "type": "coordinator"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T12:57:37.438667Z", "id": "CVE-2026-73626", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T12:57:46.464Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-73626", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T12:57:37.438667Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T12:57:41.554Z"}}], "cna": {"title": "JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager", "credits": [{"lang": "en", "type": "reporter", "value": "de3erve-hunter"}, {"lang": "en", "type": "finder", "value": "MUFFANUJ"}, {"lang": "en", "type": "coordinator", "value": "krassowski"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "jupyterlab", "product": "jupyterlab", "versions": [{"status": "affected", "version": "4.6.0", "lessThan": "4.6.1", "versionType": "semver"}, {"status": "unaffected", "version": "4.6.1", "versionType": "semver"}], "packageURL": "pkg:pypi/jupyterlab", "defaultStatus": "unaffected"}, {"vendor": "jupyterlab", "product": "jupyterlab", "versions": [{"status": "affected", "version": "0", "lessThan": "4.5.10", "versionType": "semver"}, {"status": "unaffected", "version": "4.5.10", "versionType": "semver"}], "packageURL": "pkg:pypi/jupyterlab", "defaultStatus": "unaffected"}], "datePublic": "2026-07-21T00:00:00.000Z", "references": [{"url": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j", "name": "GitHub Security Advisory (GHSA-whvh-wf3x-g77j)", "tags": ["vendor-advisory"]}, {"url": "https://www.vulncheck.com/advisories/jupyterlab-before-authentication-bypass-via-pypiextensionmanager", "name": "VulnCheck Advisory: JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install(). The stock JupyterLab HTTP API and Extension Manager UI are not affected, as they perform a separate, correctly awaited check. The issue affects only deployments where a custom extension or downstream integration imports PyPIExtensionManager and calls install() directly with a package name influenced by untrusted input, an allowlist/blocklist is configured, the PyPI Extension Manager is enabled, and kernels and terminals are disabled or delegated to remote hosts. Fixed in JupyterLab 4.6.2 and 4.5.10."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Control"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jupyter:jupyterlab:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.6.1", "versionStartIncluding": "4.6.0"}, {"criteria": "cpe:2.3:a:jupyter:jupyterlab:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.5.10"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-08-28T13:45:55.401Z"}}}, "cveMetadata": {"cveId": "CVE-2026-73626", "state": "PUBLISHED", "dateUpdated": "2026-08-28T13:45:55.401Z", "dateReserved": "2026-08-13T11:17:25.160Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-08-13T11:28:25.551Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:pypi/jupyterlab", "product": "jupyterlab", "vendor": "jupyterlab", "versions": [{"lessThan": "4.6.1", "status": "affected", "version": "4.6.0", "versionType": "semver"}, {"status": "unaffected", "version": "4.6.1", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "packageURL": "pkg:pypi/jupyterlab", "product": "jupyterlab", "vendor": "jupyterlab", "versions": [{"lessThan": "4.5.10", "status": "affected", "version": "0", "versionType": "semver"}, {"status": "unaffected", "version": "4.5.10", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install(). The stock JupyterLab HTTP API and Extension Manager UI are not affected, as they perform a separate, correctly awaited check. The issue affects only deployments where a custom extension or downstream integration imports PyPIExtensionManager and calls install() directly with a package name influenced by untrusted input, an allowlist/blocklist is configured, the PyPI Extension Manager is enabled, and kernels and terminals are disabled or delegated to remote hosts. Fixed in JupyterLab 4.6.2 and 4.5.10."}], "id": "CVE-2026-73626", "lastModified": "2026-09-09T20:36:38.867", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-73626", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T12:57:37.438667Z", "version": "2.0.3"}}]}, "published": "2026-08-13T12:17:27.897", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/jupyterlab-before-authentication-bypass-via-pypiextensionmanager"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{"bugzilla": {"description": "jupyterlab: JupyterLab: Extension allowlist bypass allows unauthorized installations", "id": "2515249", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515249"}, "csaw": false, "cvss3": {"cvss3_base_score": "0.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N", "status": "draft"}, "cwe": "CWE-358", "details": ["JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install(). The stock JupyterLab HTTP API and Extension Manager UI are not affected, as they perform a separate, correctly awaited check. The issue affects only deployments where a custom extension or downstream integration imports PyPIExtensionManager and calls install() directly with a package name influenced by untrusted input, an allowlist/blocklist is configured, the PyPI Extension Manager is enabled, and kernels and terminals are disabled or delegated to remote hosts. Fixed in JupyterLab 4.6.2 and 4.5.10.", "A flaw was found in JupyterLab where a missing 'await' in the `PyPIExtensionManager.install()` function could lead to an allowlist/blocklist enforcement gap. This vulnerability allows direct callers of `install()` to bypass security checks, potentially enabling the installation of unauthorized extensions. This issue affects deployments where a custom extension or downstream integration calls `install()` directly with untrusted input, an allowlist/blocklist is configured, and the PyPI Extension Manager is enabled."], "name": "CVE-2026-73626", "public_date": "2026-08-13T11:28:25Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-73626\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-73626\nhttps://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j\nhttps://www.vulncheck.com/advisories/jupyterlab-before-authentication-bypass-via-pypiextensionmanager"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.6.0,4.6.1)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "4.6.1"}}], "enrichment": {"confidence": 92.0, "confidence_source": "matching", "scores": [{"score": 92.0, "source": "matching"}]}, "original": {"product": "jupyterlab", "source": "cna", "vendor": "jupyterlab"}, "product": "jupyterlab", "vendor": "jupyter"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,4.5.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "4.5.10"}}], "enrichment": {"confidence": 92.0, "confidence_source": "matching", "scores": [{"score": 92.0, "source": "matching"}]}, "original": {"product": "jupyterlab", "source": "cna", "vendor": "jupyterlab"}, "product": "jupyterlab", "vendor": "jupyter"}], "created": "2026-08-13T13:15:04.109118+00:00", "updated": "2026-08-28T20:30:08.461053+00:00", "vendors": ["jupyter", "jupyter$PRODUCT$jupyterlab"]}