nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-427.
Summary
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a Windows batch script, capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Windows platform from this directory, the `inkscape.bat` file is run unexpectedly. This issue has been patched in version 7.17.0.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| jupyterlab | nbconvert | before 7.17.0 | 7.17.0 | Patch available | CNA |
| — | nbconvert (PyPI) | before 7.17.0 | 7.17.0 | Patch available | GHSA-xm59-rqc7-hhvf |
- nbconvert Vendorjupyterlab Affected before 7.17.0 Fixed in 7.17.0 Patch available CNA
- nbconvert (PyPI) Vendor— Affected before 7.17.0 Fixed in 7.17.0 Patch available GHSA-xm59-rqc7-hhvf
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:python:*:* | up to 7.16.6 | Vulnerable | jupyterlab |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:python:*:* Versions up to 7.16.6 Vulnerable ·jupyterlab
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA nbconvert (jupyter) Fixed in 7.17.0
- Fix · GHSA-xm59-rqc7-hhvf nbconvert (PyPI) Fixed in 7.17.0 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat OpenShift AI (RHOAI)
- Red Hat Satellite 6
Timeline
- 2026-10-02 Threatist record created from CVE-2025-53000
- 2026-10-03 Alias added: GHSA-xm59-rqc7-hhvf
References
Other 6
- https://github.com/jupyter/nbconvert/security/advisories/GHSA-xm59-rqc7-hhvf
- https://github.com/jupyter/nbconvert/issues/2258
- https://github.com/jupyter/nbconvert/commit/c9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71
- https://github.com/jupyter/nbconvert/blob/4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7/nbconvert/preprocessors/svg2pdf.py#L104
- https://github.com/jupyter/nbconvert/releases/tag/v7.17.0
- https://github.com/jupyter/nbconvert
More jupyterlab Nbconvert vulnerabilities
- TI-2021-12526 nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths CVSS 3.1HIGH 7.5
- TI-2026-28364 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding CVSS 3.1MEDIUM 6.5
- TI-2026-28363 nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames CVSS 3.1MEDIUM 6.5
Sources
- CVE-2025-53000 · CVE Program
- CVE-2025-53000 · NVD
- FIRST EPSS
- GHSA-xm59-rqc7-hhvf · GitHub Advisory Database · CC BY 4.0
- CVE-2025-53000 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences