PT-2026-117480 · Mercury · Mercury
CVE-2026-111057
·
Published
2026-10-19
·
Updated
2026-10-19
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Mercury versions 3.0.0 through 3.2.3
Description
A malformed regular expression in the
BLOCKED PATTERNS list causes the /lab and /api/terminals literals to concatenate. This allows requests to the /api/terminals endpoint to bypass the anonymous endpoint blocklist and reach the Jupyter Server terminal API. An unauthenticated attacker can leverage this to spawn an interactive operating-system shell, enabling command execution and access to data available to the Mercury process.Recommendations
Update to version 3.2.4.
Fix
RCE
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Mercury