CVE-2026-111057criticalCWE-185CWE-284

CVE-2026-111057: falha crítica em mljar mercury

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar mercury+ Monitorar mercury

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.7%
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server's terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
mljar · mercury
CVEs relacionadas — mljar mercury

No mesmo produto, das mais perigosas para as menos.

CVE-2026-111058CRITICALMercury: Unauthenticated Remote Code Execution via /api/kernelsEPSS 0.5%CVE-2026-111059MEDIUMMercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLEPSS 0.3%