{"id":"ghsa-ghsa-rv4m-xm3f-3ccq","seq":2445,"kind":"advisory","title":"Mercury: Unauthenticated Remote Code Execution via /api/kernels","url":"https://github.com/advisories/GHSA-rv4m-xm3f-3ccq","permalink":"https://vulnpulse.app/items/ghsa-ghsa-rv4m-xm3f-3ccq","summary":"影響: pip:mercury <= 3.2.5 → 3.2.6\nMercury runs a JupyterLab server with anonymous access by default (mercury_app/__main__.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints. The vulnerability /api/kernels is NOT in the blocklist (and cannot be — Mercury needs kernels…","severity":"critical","techs":["python"],"cves":["CVE-2026-111058"],"tags":["GHSA-rv4m-xm3f-3ccq","mercury"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-19T16:49:08.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}