Mercury: Unauthenticated Remote Code Execution via /api/kernels

影響: pip:mercury <= 3.2.5 → 3.2.6

Mercury runs a JupyterLab server with anonymous access by default (mercury_app/__main__.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints. The vulnerability /api/kernels is NOT in the blocklist (and cannot be — Mercury needs kernels…

在 GitHub Advisory Database 阅读

2026/10/20 01:49，GitHub Advisory Database 发布了“Mercury: Unauthenticated Remote Code Execution via /api/kernels”（类型：漏洞公告）。严重程度为“严重”（critical）。相关技术：Python。CVE：CVE-2026-111058。