CVE-2026-39377

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions 6.5 through 7.17.0 allow arbitrary file writes to locations outside the intended output directory when processing notebooks containing crafted cell attachment filenames. The `ExtractAttachmentsPreprocessor` passes attachment filenames directly to the filesystem without sanitization, enabling path traversal attacks. This vulnerability provides complete control over both the destination path and file extension. Version 7.17.1 contains a patch.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/jupyter/nbconvert/releases/tag/v7.17.1	Product
https://github.com/jupyter/nbconvert/security/advisories/GHSA-4c99-qj7h-p3vg	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:python:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) La herramienta nbconvert, jupyter nbconvert, convierte cuadernos Jupyter a varios otros formatos a través de plantillas Jinja. Las versiones 6.5 hasta la 7.17.0 permiten escrituras de archivos arbitrarias a ubicaciones fuera del directorio de salida previsto al procesar cuadernos que contienen nombres de archivo de adjuntos de celda manipulados. El ’ExtractAttachmentsPreprocessor’ pasa los nombres de archivo de los adjuntos directamente al sistema de archivos sin saneamiento, lo que permite ataques de salto de ruta. Esta vulnerabilidad proporciona control completo tanto sobre la ruta de destino como sobre la extensión del archivo. La versión 7.17.1 contiene un parche.

Information

Published : 2026-04-21 01:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-39377

Mitre link : CVE-2026-39377

CVE.ORG link : CVE-2026-39377

JSON object : View

Products Affected

jupyter

nbconvert

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-73

External Control of File Name or Path

{"id": "CVE-2026-39377", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-39377", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-21T16:01:22.179013Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "jupyter", "product": "nbconvert", "versions": [{"status": "affected", "version": ">= 6.5, < 7.17.1"}]}]}], "published": "2026-04-21T01:16:05.937", "references": [{"url": "https://github.com/jupyter/nbconvert/releases/tag/v7.17.1", "tags": ["Product"], "source": "security-advisories@github.com"}, {"url": "https://github.com/jupyter/nbconvert/security/advisories/GHSA-4c99-qj7h-p3vg", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions 6.5 through 7.17.0 allow arbitrary file writes to locations outside the intended output directory when processing notebooks containing crafted cell attachment filenames. The `ExtractAttachmentsPreprocessor` passes attachment filenames directly to the filesystem without sanitization, enabling path traversal attacks. This vulnerability provides complete control over both the destination path and file extension. Version 7.17.1 contains a patch."}, {"lang": "es", "value": "La herramienta nbconvert, jupyter nbconvert, convierte cuadernos Jupyter a varios otros formatos a trav\u00e9s de plantillas Jinja. Las versiones 6.5 hasta la 7.17.0 permiten escrituras de archivos arbitrarias a ubicaciones fuera del directorio de salida previsto al procesar cuadernos que contienen nombres de archivo de adjuntos de celda manipulados. El \u2019ExtractAttachmentsPreprocessor\u2019 pasa los nombres de archivo de los adjuntos directamente al sistema de archivos sin saneamiento, lo que permite ataques de salto de ruta. Esta vulnerabilidad proporciona control completo tanto sobre la ruta de destino como sobre la extensi\u00f3n del archivo. La versi\u00f3n 7.17.1 contiene un parche."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "B8ACC92D-6ED7-40BE-917E-5527F6746B60", "versionEndExcluding": "7.17.1", "versionStartIncluding": "6.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}