---
id: CVE-2026-102530
title: >-
  JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code
  Execution on Connect URL
summary: >-
  JupyterLab Desktop is the cross-platform desktop application for JupyterLab.
  Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection
  dialog and Welcome view without safe encoding. An attacker who convinces a
  user to …
severity: critical
cvss: 9.4
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'
cvssSource: cna
cwe:
  - CWE-79
  - CWE-94
  - CWE-116
vendor: jupyterlab
product: jupyterlab-desktop
affected:
  - jupyterlab-desktop < 4.6.2-1
published: '2026-11-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T20:35:53.731Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-102530'
references:
  - url: >-
      https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-vrj4-r4fw-9rfh
    label: >-
      https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-vrj4-r4fw-9rfh
  - url: >-
      https://github.com/jupyterlab/jupyterlab-desktop/commit/f59fd4f61bc6a2ca89cf0d13dce5f60511eaef5d
    label: >-
      https://github.com/jupyterlab/jupyterlab-desktop/commit/f59fd4f61bc6a2ca89cf0d13dce5f60511eaef5d
  - url: 'https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1'
    label: 'https://github.com/jupyterlab/jupyterlab-desktop/releases/tag/v4.6.2-1'
tags:
  - cve.org
ingestedAt: '2026-11-06T21:04:04.245Z'
epss: 0.00417
epssPercentile: 0.36221
---

## Overview

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection dialog and Welcome view without safe encoding. An attacker who convinces a user to submit a crafted URL can execute JavaScript in the Welcome renderer and abuse its privileged IPC bridge to execute arbitrary code with the user’s privileges. The Welcome view also unsafely renders RSS news-feed titles; exploitation through this separate input path requires control over content delivered through the application’s Jupyter Blog feed or its cached feed data, rather than submission of a remote-server URL. This issue affects all supported platforms and is fixed in version 4.6.2-1.

## Affected

- `jupyterlab-desktop < 4.6.2-1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.