# CVE-2026-73627: JupyterLab plugin manager lock-rule enforcement bypass

Source: https://junglewise.ai/threats/cve-2026-73627-jupyterlab-plugin-manager-lock-rule-enforcement-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-13. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-73627 · Severity: info · CVSS 6 · Published 2026-08-13

JupyterLab is a web-based interactive development environment widely used for data science and computing. Administrators can lock plugins to enforce security policies (e.g., restrict upload/download capabilities). An authenticated attacker can bypass these administrative locks by making direct API requests, enabling or disabling plugins at will and circumventing security restrictions—potentially exposing data or enabling unauthorized operations.

Technologies: [Project Jupyter JupyterLab](https://junglewise.ai/threats/technologies/jupyterlab). Vendors: [Project Jupyter](https://junglewise.ai/threats/vendors/project-jupyter).

## Quick answers

**Is CVE-2026-73627 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-73627 being exploited in the wild.

**How severe is CVE-2026-73627?** Informational severity, with a CVSS score of 6, published 13 August 2026.

**Which products and versions are affected?** Project Jupyter JupyterLab >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1.

**Is there a fix for CVE-2026-73627?** A patch was published on 2026: Fixed in JupyterLab 4.5.10 and 4.6.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-73627 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-73627?** Check whether you run Project Jupyter JupyterLab at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is a server-side enforcement gap in JupyterLab's plugin manager affecting versions 4.1.0–4.5.9 and 4.6.0–4.6.1. An authenticated user can send direct requests to the /lab/api/plugins endpoint to bypass administrator lock rules, including multi-plugin extensions and "lock all" mechanisms. The attack requires network access and valid authentication credentials; no user interaction is needed. An attacker can toggle plugin states to circumvent hardening measures such as upload/download limits. Patches are available in versions 4.5.10 and 4.6.2.

## Affected products

- Project Jupyter JupyterLab >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1

## Timeline

- 2026-07-21: disclosed
- 2026-08-13: advisory: Published on NVD
- 2026: patched: Fixed in JupyterLab 4.5.10 and 4.6.2

## References

- [https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-h5v5-8746-g7mm](https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-h5v5-8746-g7mm)
- [https://www.vulncheck.com/advisories/jupyterlab-plugin-manager-lock-rule-enforcement-bypass](https://www.vulncheck.com/advisories/jupyterlab-plugin-manager-lock-rule-enforcement-bypass)

## Related threats

- [JupyterLab HTML output sanitization bypass via clipboard paste](https://junglewise.ai/threats/cve-2026-102831-jupyterlab-is-an-extensible-environment-for-interactive-and)
- [JupyterLab code injection via Plural-Forms header in language pack](https://junglewise.ai/threats/cve-2026-102830-jupyterlab-is-an-extensible-environment-for-interactive-and)
- [JupyterLab arbitrary code execution via malicious overrides.json](https://junglewise.ai/threats/cve-2026-73417-jupyterlab-arbitrary-code-execution-via-malicious-overrides-json)
- [JupyterLab extension blocklist bypass via package name variant](https://junglewise.ai/threats/cve-2026-73416-jupyterlab-extension-blocklist-bypass-via-package-name-variant)
- [Jupyter JupyterLab auth bypass in PluginManager lock-rule enforcement](https://junglewise.ai/threats/jupyter-jupyterlab-auth-bypass-in-pluginmanager-lock-rule-enforcement-ac224559)