---
id: CVE-2026-54527
title: >-
  jupyterlab-git: jupyterlab-git-core: @jupyterlab/git: JupyterLab Git: Remote
  Code Execution via crafted Git filenames in commit history (CV…
summary: >-
  A flaw was found in JupyterLab Git, a Git extension for JupyterLab. A remote
  attacker with commit access to a shared Git repository can exploit a stored
  cross-site scripting (XSS) vulnerability (CWE-79). By crafting a malicious Git
  filenam…
severity: critical
cvss: 9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'
cvssSource: vendor
cwe: CWE-79
vendor: Red Hat
product: Red Hat OpenShift AI (RHOAI)
affected:
  - openshift_ai_rhoai
patched:
  - jupyterlab-git 0.54.0
  - jupyterlab-git-core 0.54.0
  - '@jupyterlab/git 0.54.0'
published: '2026-07-08'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:14:42+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54527.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54527.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-54527'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2498281'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-54527'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-54527'
  - url: >-
      https://github.com/jupyterlab/jupyterlab-git/commit/c6d37b88f36aa59aee317930b95e427fb9d6b09b
  - url: 'https://github.com/jupyterlab/jupyterlab-git/releases/tag/v0.54.0'
  - url: >-
      https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-f962-v9hr-pfg5
  - url: 'https://github.com/advisories/GHSA-f962-v9hr-pfg5'
tags:
  - csaf
  - vex
  - red-hat
  - ghsa
  - pip
epss: 0.00529
epssPercentile: 0.44546
ecosystem: pip
ingestedAt: '2026-06-22T15:52:21.040Z'
---

## Overview

A flaw was found in JupyterLab Git, a Git extension for JupyterLab. A remote attacker with commit access to a shared Git repository can exploit a stored cross-site scripting (XSS) vulnerability (CWE-79). By crafting a malicious Git filename, an attacker can execute arbitrary JavaScript in a victim's browser session when they view the rename diff in the Git History tab, potentially leading to remote code execution (RCE).

## Vendor advisories

- **Red Hat VEX** · Important · affected: Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat OpenShift AI (RHOAI) · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54527.json)

**jupyterlab-git: jupyterlab-git-core: @jupyterlab/git: JupyterLab Git: Remote Code Execution via crafted Git filenames in commit history** — rated Important by Red Hat. Released 2026-07-08, updated 2026-10-23.

Affected:

- Red Hat OpenShift AI (RHOAI)

No fix planned:

- Red Hat OpenShift AI (RHOAI)

Not affected:

- Red Hat OpenShift AI (RHOAI)

## Remediation

Affected

## Package advisory (CVE-2026-54527)

Affected packages:

- `jupyterlab-git >= 0.30.0b3, < 0.54.0a1`
- `jupyterlab-git-core >= 0.30.0b3, < 0.54.0a1`
- `@jupyterlab/git >= 0.30.0b3, < 0.54.0-a1`

Patched in:

- `jupyterlab-git 0.54.0`
- `jupyterlab-git-core 0.54.0`
- `@jupyterlab/git 0.54.0`

Source: https://github.com/advisories/GHSA-f962-v9hr-pfg5