CVE-2026-114140High· 7.8▾ TwilightA flaw was found in nbconvert. This flaw allows an attacker to perform an arbitrary file write by enticing a user to convert a maliciously crafted Jupyter notebook. Due to improper path validation in ExtractOutputPreprocessor, attacker-con…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.3%
8.8 → 7.8
0.3% → 0.4%
A flaw was found in nbconvert. This flaw allows an attacker to perform an arbitrary file write by enticing a user to convert a maliciously crafted Jupyter notebook. Due to improper path validation in ExtractOutputPreprocessor, attacker-controlled cell output metadata can traverse outside the target directory, allowing arbitrary files to be created or overwritten with the user's privileges.
nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor — rated Important by Red Hat. Released 2026-10-21, updated 2026-10-23.
Affected:
No fix planned:
Not affected:
Affected
Affected packages:
nbconvert >= 5.4.0, < 7.17.2Patched in:
nbconvert 7.17.2Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114109High· 7.8uv: uv: Arbitrary code execution via path traversal in entry point names (CVE-2026-114109)
CVE-2026-109956High· 7.0NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths
CVE-2026-78679Medium· 6.5GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard
CVE-2026-73619Medium· 6.5gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()` (CVE-2026-73619)
CVE-2026-79676Medium· 5.9nltk: NLTK: Information disclosure via path traversal with symlink bypass (CVE-2026-79676)
CVE-2026-58203Medium· 5.3pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max…