JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the com.apple.security.cs.allow-dyld-environment-variables entitlement, allowing the dynamic linker to honor DYLD_INSERT_LIBRARIES despite the hardened runtime. An attacker who can already execute code as the current user can load an arbitrary dynamic library into the JupyterLab Desktop process and inherit TCC permissions previously granted to the application, including access to protected Documents, Desktop, or Downloads folders without another macOS prompt. Exploitation requires existing local code execution and prior TCC grants; it does not provide initial or remote code execution. Windows and Linux are not affected. This vulnerability is fixed in 4.6.2-1.

Etkilenen sürümler1 yazılım

Kaynaklar5 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…esktop/security/advisories/GHSA-8cvf-4977-r95v Diğer
• github.com/…ommit/302fb36caca62bbbba7bfaaf0a4966a38cbead44 Diğer
• github.com/…erlab/jupyterlab-desktop/releases/tag/v4.6.2-1 Diğer

Kayıt geçmişi

1. 6 Kas 2026 23:28Yayımlandı

İlgili açıklar

• 9,4 CVE-2026-102530JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL
• 5,5 CVE-2025-55002JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses
• 9,6 CVE-2026-86044JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution
• 8,2 CVE-2026-119170CPython 3.14.10 hashlib modülünde FIPS hash algoritması denetimi regresyonu
• 6,6 CVE-2026-95652Improper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formatter
• 3,5 CVE-2026-105991Multiple vulnerabilities that affects IBM Db2 Genius Hub