The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to output_files_dir without limiting the result to the intended directory. When a victim converts a malicious notebook with the markdown, LaTeX, reStructuredText, or AsciiDoc exporter, path traversal in the output filename can write attacker-controlled output data to arbitrary locations accessible to the victim. Running the notebook cell again replaces the malicious output metadata, but merely converting the supplied notebook does not. This issue is fixed in version 7.17.2.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja
    templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py
    joins the attacker-controlled cell output metadata filename to output_files_dir without limiting the
    result to the intended directory. When a victim converts a malicious notebook with the markdown, LaTeX,
    reStructuredText, or AsciiDoc exporter, path traversal in the output filename can write attacker-
    controlled output data to arbitrary locations accessible to the victim. Running the notebook cell again
    replaces the malicious output metadata, but merely converting the supplied notebook does not. This issue
    is fixed in version 7.17.2. (CVE-2026-114140)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja     templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py     joins the attacker-controlled cell output metadata filename to output_files_dir without limiting the     result to the intended directory. When a victim converts a malicious notebook with the markdown, LaTeX,     reStructuredText, or AsciiDoc exporter, path traversal in the output filename can write attacker-     controlled output data to arbitrary locations accessible to the victim. Running the notebook cell again     replaces the malicious output metadata, but merely converting the supplied notebook does not. This issue     is fixed in version 7.17.2. (CVE-2026-114140)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477161	Chainguard: tensorflow-cpu-jupyter: security update to 2.21.0-r14	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
477161	Chainguard: tensorflow-cpu-jupyter: security update to 2.21.0-r14	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
371034	Linux Distros Unpatched Vulnerability : CVE-2026-114140	Nessus	Misc.	Local	high
476828	SCA: security update for nbconvert (GHSA-pjvx-prjx-h659)	Tenable Cloud Security	SCA Checks	Local	high
476828	SCA: security update for nbconvert (GHSA-pjvx-prjx-h659)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-114140

high

Tenable Plugins

high

high

high

high

high