CVE-2026-86044

Name of the Vulnerable Software and Affected Versions JupyterLab Desktop versions prior to 4.6.2-1

Description JupyterLab Desktop exposed the getServerInfo function to the renderer without verifying if the current page maintained the local Jupyter server origin. In local managed sessions using JupyterLab versions prior to 4.4.8, an attacker can embed a crafted MathJax link within an untrusted notebook. If a user clicks this link, the renderer navigates to an attacker-controlled website while maintaining access to the preload bridge. The malicious site can then call getServerInfo to retrieve the local server URL and authentication token. Subsequently, the attacker can use the Jupyter REST API to create and trust a notebook that executes arbitrary code on the victim's machine.

Recommendations Update JupyterLab Desktop to version 4.6.2-1.