## Mercury: Unauthenticated Remote Code Execution via /api/kernels

- 種別: advisory
- 重大度: critical
- 関連技術: python
- CVE: CVE-2026-111058
- 公開日時: 2026-10-19T16:49:08.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-rv4m-xm3f-3ccq)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-rv4m-xm3f-3ccq

影響: pip:mercury <= 3.2.5 → 3.2.6
Mercury runs a JupyterLab server with anonymous access by default (mercury_app/__main__.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints. The vulnerability /api/kernels is NOT in the blocklist (and cannot be — Mercury needs kernels…