{"id":"CVE-2026-111057","title":"Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass","summary":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to…","severity":"critical","cvss":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-185","CWE-284"],"vendor":"mljar","product":"mercury","affected":["mercury >= 3.0.0, < 3.2.4"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-28T15:31:16.899020Z"},"exploitAvailable":true,"published":"2026-10-19","updated":"2026-10-28","sourceUpdated":"2026-10-28T15:31:24.524Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111057","references":[{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm","label":"https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm"},{"url":"https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f","label":"https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.4","label":"https://github.com/mljar/mercury/releases/tag/v3.2.4"},{"url":"https://github.com/mljar/mercury"},{"url":"https://github.com/advisories/GHSA-f8c7-rwf9-fmgm"}],"tags":["cve.org","exploit-available","osv","pip","ghsa"],"epss":0.00443,"epssPercentile":0.38388,"aliases":["GHSA-f8c7-rwf9-fmgm"],"ecosystem":"pip","patched":["mercury 3.2.4"],"ingestedAt":"2026-10-19T16:32:30.071Z","slug":"CVE-2026-111057","body":"## Overview\n\nMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server's terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4.\n\n## Affected\n\n- `mercury >= 3.0.0, < 3.2.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-111057)\n\nAffected packages:\n\n- `mercury >= 3.0.0, < 3.2.4`\n\nPatched in:\n\n- `mercury 3.2.4`\n\nSource: https://osv.dev/vulnerability/GHSA-f8c7-rwf9-fmgm","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":55,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":230707,"id":"CVE-2026-111057","ts":1793204066594,"field":"exploit_available","old":"false","new":"true"}]}