Mercury: Unauthenticated Remote Code Execution via /api/kernels

影響: pip:mercury <= 3.2.5 → 3.2.6

Mercury runs a JupyterLab server with anonymous access by default (mercury_app/__main__.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints. The vulnerability /api/kernels is NOT in the blocklist (and cannot be — Mercury needs kernels…

Read on GitHub Advisory Database

On 10/20/2026, 01:49 AM, GitHub Advisory Database published "Mercury: Unauthenticated Remote Code Execution via /api/kernels" (type: Advisory). Severity is "Critical" (critical). Related technologies: Python. CVE: CVE-2026-111058.