{"id":"CVE-2026-54527","title":"jupyterlab-git: jupyterlab-git-core: @jupyterlab/git: JupyterLab Git: Remote Code Execution via crafted Git filenames in commit history (CV…","summary":"A flaw was found in JupyterLab Git, a Git extension for JupyterLab. A remote attacker with commit access to a shared Git repository can exploit a stored cross-site scripting (XSS) vulnerability (CWE-79). By crafting a malicious Git filenam…","severity":"critical","cvss":9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvssSource":"vendor","cwe":"CWE-79","vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","affected":["openshift_ai_rhoai"],"patched":["jupyterlab-git 0.54.0","jupyterlab-git-core 0.54.0","@jupyterlab/git 0.54.0"],"published":"2026-07-08","updated":"2026-10-23","sourceUpdated":"2026-10-23T11:14:42+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54527.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54527.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-54527"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2498281"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54527"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54527"},{"url":"https://github.com/jupyterlab/jupyterlab-git/commit/c6d37b88f36aa59aee317930b95e427fb9d6b09b"},{"url":"https://github.com/jupyterlab/jupyterlab-git/releases/tag/v0.54.0"},{"url":"https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-f962-v9hr-pfg5"},{"url":"https://github.com/advisories/GHSA-f962-v9hr-pfg5"}],"tags":["csaf","vex","red-hat","ghsa","pip"],"epss":0.00529,"epssPercentile":0.44546,"ecosystem":"pip","ingestedAt":"2026-06-22T15:52:21.040Z","slug":"CVE-2026-54527","body":"## Overview\n\nA flaw was found in JupyterLab Git, a Git extension for JupyterLab. A remote attacker with commit access to a shared Git repository can exploit a stored cross-site scripting (XSS) vulnerability (CWE-79). By crafting a malicious Git filename, an attacker can execute arbitrary JavaScript in a victim's browser session when they view the rename diff in the Git History tab, potentially leading to remote code execution (RCE).\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat OpenShift AI (RHOAI) · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54527.json)\n\n**jupyterlab-git: jupyterlab-git-core: @jupyterlab/git: JupyterLab Git: Remote Code Execution via crafted Git filenames in commit history** — rated Important by Red Hat. Released 2026-07-08, updated 2026-10-23.\n\nAffected:\n\n- Red Hat OpenShift AI (RHOAI)\n\nNo fix planned:\n\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nAffected\n\n## Package advisory (CVE-2026-54527)\n\nAffected packages:\n\n- `jupyterlab-git >= 0.30.0b3, < 0.54.0a1`\n- `jupyterlab-git-core >= 0.30.0b3, < 0.54.0a1`\n- `@jupyterlab/git >= 0.30.0b3, < 0.54.0-a1`\n\nPatched in:\n\n- `jupyterlab-git 0.54.0`\n- `jupyterlab-git-core 0.54.0`\n- `@jupyterlab/git 0.54.0`\n\nSource: https://github.com/advisories/GHSA-f962-v9hr-pfg5","depth":"midnight","depthScore":50,"depthScoreParts":{"impact":49.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":228103,"id":"CVE-2026-54527","ts":1792758085857,"field":"cvss","old":null,"new":"9"},{"seq":228102,"id":"CVE-2026-54527","ts":1792758085857,"field":"severity","old":"high","new":"critical"}]}