CVE-2026-111058: Mercury: Unauthenticated Remote Code Execution via /api/kernels

October 19, 2026

Mercury runs a JupyterLab server with anonymous access by default (mercury_app/__main__.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints.

References

github.com/advisories/GHSA-rv4m-xm3f-3ccq
github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1
github.com/mljar/mercury/releases/tag/3.2.6
github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq
nvd.nist.gov/vuln/detail/CVE-2026-111058

Code Behaviors & Features

Detect and mitigate CVE-2026-111058 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →