CVE-2026-54527Disclosure(jupyter / jupyterlab-git)

LOWCVSS 9.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch jupyter jupyterlab-git systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff in the Git History tab. This issue is fixed in version 0.54.0.

jupyter CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/jupyterlab/jupyterlab-git/commit/c6d37b88f36aa59aee317930b95e427fb9d6b09b

Exploit / PoC references

Other references

https://github.com/jupyterlab/jupyterlab-git/releases/tag/v0.54.0

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

jupyterlab-git

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 2 signals
Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-06-19); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

jupyter

Products

jupyterlab-git

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-19	1	Disclosure1
2026-08-03	1	Patch1
2026-09-12	1	Disclosure1

Full discourse3 posts

UNDERCODE TESTING@UndercodeUpdate7d
Disclosure
🚨 COMMENT BOX XSS: How a Single Script Hijacks Your #Account — #CVE-2026-54527 Stored XSS to RCE, CSP Hardening, and the Complete Defense Playbook + Video -Prediction: 📈 2 Positive | 📉 1 Negative https://undercodetesting.com/comment-box-xss-how-a-single-script-hijacks-your-account-cve-2026-54527-stored-xss-to-rce-csp-hardening-and-the-complete-defense-playbook-video/ Educational Purposes!
Post summary
The tweet promotes a blog post that discloses CVE‑2026‑54527, outlines a stored XSS leading to RCE, and offers mitigation guidance, but does not reference active exploitation or a specific exploit tool.
0000157
736 followersView on X
takenaka hiroya@Joe_Biden_ja46d
Patch
JupyterLab Git のコミット履歴で、リネーム差分のファイル名がそのまま innerHTML に入っていました。細工したファイル名を含むリポジトリの履歴を開くだけで発火します。共有の JupyterHub は影響が大きいので、0.54.0 への更新を先に。 https://cve.autoarticles.net/cve/CVE-2026-54527
Post summary
JupyterLab Git's commit history allows XSS via filenames inserted into innerHTML; a patch in version 0.54.0 is recommended to mitigate the issue.
0000051
561 followersView on X
DailyCVE@dailycve91d
Disclosure
🔴 JupyterLab (jupyterlab-git extension), Stored XSS leading to RCE, #CVE-2026-54527 (High) -DC-Jun2026-506 https://dailycve.com/jupyterlab-jupyterlab-git-extension-stored-xss-leading-to-rce-cve-2026-54527-high-dc-jun2026-506/
Post summary
This tweet announces the discovery of a high‑severity stored XSS that enables remote code execution in the JupyterLab jupyterlab‑git extension (CVE‑2026‑54527).
0000034
213 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	jupyter	jupyterlab-git	-	-	-
App	jupyter	jupyterlab-git	0.30.0	-	-
App	jupyter	jupyterlab-git	0.30.0	-	-

Explore more

Back to dashboard jupyter CVEs jupyterlab-git vulnerabilities