Read the docs
TI-2025-44024 Aliases CVE-2025-55002

Privacy permission bypass in JupyterLab Desktop for macOS

Priority LOW 24CWE-250Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation, Security bypass, Code execution
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-250, CWE-693 and CWE-94.

Summary

JupyterLab Desktop for macOS before 4.6.2-1 enables Electron's RunAsNode fuse, so the app can run arbitrary Node.js code in its process. A local user who already runs code can run code in the app's context and inherit its privacy grants, such as access to protected Documents, Desktop, or Downloads folders, without a macOS prompt. Exploitation needs prior local code execution and prior grants, and Windows and Linux are not affected.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS shipped with Electron's RunAsNode fuse enabled, allowing ELECTRON_RUN_AS_NODE to execute arbitrary Node.js code in the application process. An attacker who can already execute code as the current user can therefore run code in JupyterLab Desktop's context and inherit TCC permissions previously granted to the application, including access to protected Documents, Desktop, or Downloads folders without another macOS prompt. Exploitation requires existing local code execution and prior TCC grants; it does not provide initial or remote code execution. Windows and Linux are not affected. This vulnerability is fixed in 4.6.2-1.

Why it matters now

EPSS 0.00206 10th percentileScored 2026-11-07
Fix Fixed jupyterlab-desktop (jupyterlab): 4.6.2-1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
jupyterlabjupyterlab-desktopbefore 4.6.2-14.6.2-1Patch availableCNA
  • jupyterlab-desktop Vendorjupyterlab Affected before 4.6.2-1 Fixed in 4.6.2-1 Patch available CNA

Remediation

Update JupyterLab Desktop for macOS to 4.6.2-1, which fixes the flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA jupyterlab-desktop (jupyterlab) Fixed in 4.6.2-1

Timeline

  1. 2026-11-06 Threatist record created from CVE-2025-55002
  2. 2026-11-08 Priority changed: MEDIUM → LOW

References

Other 3

  • TI-2026-32161 Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering CVSS 4.0CRITICAL 10.0
  • TI-2026-32160 Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution CVSS 4.0CRITICAL 10.0
  • TI-2026-32159 Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed CVSS 3.1CRITICAL 9.8
  • TI-2024-26623 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action CVSS 3.1CRITICAL 10.0
  • TI-2026-78983 Path traversal in nbconvert lets crafted notebooks write files CVSS 4.0HIGH 8.8
  • TI-2026-39372 JupyterLab Git: Stored XSS leading to RCE CVSS 4.0CRITICAL 9.3
See all 89 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences