---
id: CVE-2026-111058
title: 'Mercury: Unauthenticated Remote Code Execution via /api/kernels'
summary: >-
  Mercury is a Python framework for sharing Jupyter notebooks as web
  applications and dashboards. Prior to 3.2.6, default tokenless deployments
  allow anonymous clients to create Jupyter kernels and send execute_request
  messages containing …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-862
vendor: mljar
product: mercury
affected:
  - mercury < 3.2.6
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-19T17:05:16.440516Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T17:06:53.899Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111058'
references:
  - url: 'https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq'
    label: 'https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq'
  - url: >-
      https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1
    label: >-
      https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1
  - url: 'https://github.com/mljar/mercury/releases/tag/3.2.6'
    label: 'https://github.com/mljar/mercury/releases/tag/3.2.6'
  - url: 'https://github.com/advisories/GHSA-rv4m-xm3f-3ccq'
tags:
  - cve.org
  - ghsa
  - pip
aliases:
  - GHSA-rv4m-xm3f-3ccq
ecosystem: pip
patched:
  - mercury 3.2.6
ingestedAt: '2026-10-19T16:32:30.071Z'
---

## Overview

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/kernels, and the websocket wrapper previously tracked idle activity without authorizing executable messages. This issue is fixed in version 3.2.6.

## Affected

- `mercury < 3.2.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-111058)

Affected packages:

- `mercury <= 3.2.5`

Patched in:

- `mercury 3.2.6`

Source: https://github.com/advisories/GHSA-rv4m-xm3f-3ccq