---
id: CVE-2026-111057
title: >-
  Mercury: Unauthenticated Remote Code Execution in /api/terminals - access
  control bypass
summary: >-
  Mercury is a Python framework for sharing Jupyter notebooks as web
  applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in
  BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression
  literals. Requests to…
severity: critical
cvss: 10
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-185
  - CWE-284
vendor: mljar
product: mercury
affected:
  - 'mercury >= 3.0.0, < 3.2.4'
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-28T15:31:16.899020Z'
exploitAvailable: true
published: '2026-10-19'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T15:31:24.524Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111057'
references:
  - url: 'https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm'
    label: 'https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm'
  - url: >-
      https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f
    label: >-
      https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f
  - url: 'https://github.com/mljar/mercury/releases/tag/v3.2.4'
    label: 'https://github.com/mljar/mercury/releases/tag/v3.2.4'
  - url: 'https://github.com/mljar/mercury'
  - url: 'https://github.com/advisories/GHSA-f8c7-rwf9-fmgm'
tags:
  - cve.org
  - exploit-available
  - osv
  - pip
  - ghsa
epss: 0.00443
epssPercentile: 0.38388
aliases:
  - GHSA-f8c7-rwf9-fmgm
ecosystem: pip
patched:
  - mercury 3.2.4
ingestedAt: '2026-10-19T16:32:30.071Z'
---

## Overview

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server's terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4.

## Affected

- `mercury >= 3.0.0, < 3.2.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-111057)

Affected packages:

- `mercury >= 3.0.0, < 3.2.4`

Patched in:

- `mercury 3.2.4`

Source: https://osv.dev/vulnerability/GHSA-f8c7-rwf9-fmgm