CVE-2026-111058
Mercury: Unauthenticated Remote Code Execution via /api/kernels
Mercury runs a JupyterLab server with anonymous access by default (mercury_app/main.py sets --IdentityProvider.token='' when no --token/MERCURY_TOKEN is given; when tokenless it also sets --ServerApp.disable_check_xsrf=True). It relies on a blocklist (mercury_app/block_handler.py BLOCKED_PATTERNS: /lab, /api/terminals, /api/shutdown, /files) to keep anonymous users off dangerous Jupyter endpoints.
- No known exploitation
- Severity
- Critical, CVSS 9.8 (v3.1)
- EPSS
- 0.44% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
- Affected packages
- mercury (pip) <= 3.2.5, fixed in 3.2.6 · GHSA-rv4m-xm3f-3ccq