CVE-2026-114135: Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
Jupyter Server’s gateway WebSocket handler checks that a user is authenticated, but it does not ask the configured Authorizer whether that user may execute kernels.
In Jupyter Server 2.0.0 through 2.5.0, enabling GatewayClient.url automatically replaced the normal kernel channel handler with this gateway-specific handler. An authenticated user who is denied the execute action on the kernels resource can therefore still open a kernel channel and send messages to the upstream kernel.
References
- github.com/advisories/GHSA-354v-3q48-cv69
- github.com/jupyter-server/jupyter_server/commit/35ffe5d435682128da16dc144a8e9e9f8fa85dd8
- github.com/jupyter-server/jupyter_server/pull/1261
- github.com/jupyter-server/jupyter_server/releases/tag/v2.6.0
- github.com/jupyter-server/jupyter_server/security/advisories/GHSA-354v-3q48-cv69
- nvd.nist.gov/vuln/detail/CVE-2026-114135
Code Behaviors & Features
Detect and mitigate CVE-2026-114135 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →