Path Traversal Vulnerability in Jupyter nbconvert Tool

CVE-2026-114140

What is CVE-2026-114140?

The Jupyter nbconvert tool, utilized for converting Jupyter notebooks into various formats, is susceptible to a path traversal vulnerability. This flaw affects versions from 5.4.0 to 7.17.2, where the ExtractOutputPreprocessor does not adequately restrict the file output directory. By exploiting this weakness, an attacker can manipulate cell output metadata, leading to potential unauthorized writing of data to arbitrary locations on the victim's system when converting notebooks with specific formats. Although re-running the notebook cell may overwrite the malicious data, the initial conversion poses a significant risk. The vulnerability has been addressed in version 7.17.2.

References