CVE-2026-39378

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enable `HTMLExporter.embed_images`; it is not enabled by default.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/jupyter/nbconvert/releases/tag/v7.17.1	Product
https://github.com/jupyter/nbconvert/security/advisories/GHSA-7jqv-fw35-gmx9	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:python:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) La herramienta nbconvert, jupyter nbconvert, convierte cuadernos Jupyter a varios otros formatos a través de plantillas Jinja. En las versiones 6.5 a 7.17.0, cuando HTMLExporter.embed_images=True, el renderizador markdown de nbconvert permite la lectura arbitraria de archivos a través de salto de ruta en referencias de imagen. Un cuaderno malicioso puede exfiltrar archivos sensibles del host de conversión incrustándolos como URIs de datos base64 en el HTML de salida. nbconvert 7.17.1 contiene una corrección. Como solución alternativa, no habilite HTMLExporter.embed_images; no está habilitado por defecto.

Information

Published : 2026-04-21 01:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-39378

Mitre link : CVE-2026-39378

CVE.ORG link : CVE-2026-39378

JSON object : View

Products Affected

jupyter

nbconvert

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-73

External Control of File Name or Path

{"id": "CVE-2026-39378", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-39378", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-21T13:43:09.070985Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "jupyter", "product": "nbconvert", "versions": [{"status": "affected", "version": ">= 6.5, < 7.17.1"}]}]}], "published": "2026-04-21T01:16:06.073", "references": [{"url": "https://github.com/jupyter/nbconvert/releases/tag/v7.17.1", "tags": ["Product"], "source": "security-advisories@github.com"}, {"url": "https://github.com/jupyter/nbconvert/security/advisories/GHSA-7jqv-fw35-gmx9", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enable `HTMLExporter.embed_images`; it is not enabled by default."}, {"lang": "es", "value": "La herramienta nbconvert, jupyter nbconvert, convierte cuadernos Jupyter a varios otros formatos a trav\u00e9s de plantillas Jinja. En las versiones 6.5 a 7.17.0, cuando HTMLExporter.embed_images=True, el renderizador markdown de nbconvert permite la lectura arbitraria de archivos a trav\u00e9s de salto de ruta en referencias de imagen. Un cuaderno malicioso puede exfiltrar archivos sensibles del host de conversi\u00f3n incrust\u00e1ndolos como URIs de datos base64 en el HTML de salida. nbconvert 7.17.1 contiene una correcci\u00f3n. Como soluci\u00f3n alternativa, no habilite HTMLExporter.embed_images; no est\u00e1 habilitado por defecto."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "B8ACC92D-6ED7-40BE-917E-5527F6746B60", "versionEndExcluding": "7.17.1", "versionStartIncluding": "6.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}