JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installation but passes uninstall names to PyPIExtensionManager.uninstall and python -m pip uninstall without rejecting option-like values. The security impact requires that the PyPI Extension Manager is enabled, the account can call the extension API, and kernels and terminals are disabled or delegated to remote hosts; otherwise the user can already read files and make outbound requests directly. An authenticated user with extension API access can supply a pip requirements option to make the server read a local file or fetch an internal URL, and reflected parse errors can return the first unparsable line or response content. A pip log option can also create or corrupt a chosen path with pip-generated log text, but the requester cannot select an arbitrary disclosed line or arbitrary file content, and the injection does not add code execution or availability impact beyond ordinary package removal. This issue is fixed in JupyterLab 4.5.11 and 4.6.4.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter
    Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall
    request reaches ExtensionHandler.post, which validates extension names for installation but passes
    uninstall names to PyPIExtensionManager.uninstall and python -m pip uninstall without rejecting option-
    like values. The security impact requires that the PyPI Extension Manager is enabled, the account can call
    the extension API, and kernels and terminals are disabled or delegated to remote hosts; otherwise the user
    can already read files and make outbound requests directly. An authenticated user with extension API
    access can supply a pip requirements option to make the server read a local file or fetch an internal URL,
    and reflected parse errors can return the first unparsable line or response content. A pip log option can
    also create or corrupt a chosen path with pip-generated log text, but the requester cannot select an
    arbitrary disclosed line or arbitrary file content, and the injection does not add code execution or
    availability impact beyond ordinary package removal. This issue is fixed in JupyterLab 4.5.11 and 4.6.4.
    (CVE-2026-102904)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter     Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall     request reaches ExtensionHandler.post, which validates extension names for installation but passes     uninstall names to PyPIExtensionManager.uninstall and python -m pip uninstall without rejecting option-     like values. The security impact requires that the PyPI Extension Manager is enabled, the account can call     the extension API, and kernels and terminals are disabled or delegated to remote hosts; otherwise the user     can already read files and make outbound requests directly. An authenticated user with extension API     access can supply a pip requirements option to make the server read a local file or fetch an internal URL,     and reflected parse errors can return the first unparsable line or response content. A pip log option can     also create or corrupt a chosen path with pip-generated log text, but the requester cannot select an     arbitrary disclosed line or arbitrary file content, and the injection does not add code execution or     availability impact beyond ordinary package removal. This issue is fixed in JupyterLab 4.5.11 and 4.6.4.
    (CVE-2026-102904)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
473747	Chainguard: jupyterhub-k8s-singleuser-sample: security update to 4.4.2-r7	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
473747	Chainguard: jupyterhub-k8s-singleuser-sample: security update to 4.4.2-r7	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
455123	SCA: security update for jupyterlab (GHSA-3325-v43h-43rv)	Tenable Cloud Security	SCA Checks	Local	medium
455123	SCA: security update for jupyterlab (GHSA-3325-v43h-43rv)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
358357	Linux Distros Unpatched Vulnerability : CVE-2026-102904	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-102904

medium

Tenable Plugins

medium

medium

medium

medium

medium