CVE-2026-114140 | Jupyter nbconvert up to 7.17.1 ExtractOutputPreprocessor extractoutput.py path traversal

October 21, 2026 Yanac

A vulnerability was found in Jupyter nbconvert up to 7.17.1. It has been rated as critical. The affected element is an unknown function of the file nbconvert/preprocessors/extractoutput.py of the component ExtractOutputPreprocessor. The manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-114140. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More