Known vulnerabilities in jupyterlab-desktop
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-102530 | JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL | 9.4 Critical | Nov 6, 2026 |
| CVE-2025-55002 | JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses | 5.5 Medium | Nov 6, 2026 |
| CVE-2026-86044 | JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution | 9.6 Critical | Nov 6, 2026 |
| CVE-2025-54991 | JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS) | 5.5 Medium | Nov 6, 2026 |