JupyterLab Desktop flaws allow permission bypass and remote code execution
Data-notebook app can let attackers hack your PC via bad links!
Summary
Several flaws in the JupyterLab Desktop app let attackers borrow macOS file access or run code on the PC. Versions before 4.6.2-1 are affected.
Affected when
- Using the app on macOS with file access granted
- An attacker getting the user to open a malicious link or address
What to do
Update JupyterLab Desktop to 4.6.2-1 or later.
Products and platforms
CVE IDs
Sources
Times
First published
First seen