Mercury: Unauthenticated Remote Code Execution via /api/kernels

影響: pip:mercury <= 3.2.5 → 3.2.6

Mercury runs a JupyterLab server with anonymous access by default (mercury_app/__main__.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints. The vulnerability /api/kernels is NOT in the blocklist (and cannot be — Mercury needs kernels…

GitHub Advisory Databaseで読む

2026/10/20 01:49、GitHub Advisory Databaseが「Mercury: Unauthenticated Remote Code Execution via /api/kernels」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「緊急」(critical) です。関連する技術: Python。CVE: CVE-2026-111058。