Patch Forecast
Amber warning
Patch this week.

CVE-2026-111057 · GHSA-f8c7-rwf9-fmgm

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Risk score
78/100
CVSS
10.0 v3.1
Exploit chance (30 days)
0.4%
Published
19 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A vulnerability in Mercury allows an unauthenticated attacker to execute commands and access data through an interactive operating-system shell. This is due to a missing comma in the BLOCKED_PATTERNS regular-expression literals.
Affected
{'products': ['Mercury'], 'packages': [{'ecosystem': 'pip', 'name': 'mercury', 'vulnerable': '>= 3.0.0, <= 3.2.3', 'patched': '3.2.4'}]}
Fix
Upgrade to version 3.2.4 or later
Exploitation
No known exploitation

Story map

Story map: mercuryTHE FLAWSTHE FIXCVE-2026-111057Mercury: UnauthenticatedRemote Code Execution in/api/terminals - access…CVSS 10.0 · EPSS 0%CVE-2026-111058Mercury: UnauthenticatedRemote Code Execution via/api/kernelsCVSS 9.8 · EPSS 0%CVE-2026-111059Mercury: Stored / DOMCross-Site Scripting (XSS):mr.Markdown renders…CVSS 6.1 · EPSS 0%Upgrade mercury3.2.4 · 3.2.6 · 3.2.11or later on your release lineWho is exposed{'products': ['Mercury'],'packages': [{'ecosystem': 'pip','name': 'mercury', 'vulnerable':'>= 3.0.0, <= 3.2.3', 'patched':'3.2.4'}]}AMBER · PATCH THIS WEEKmercuryA vulnerability in Mercury allowsan unauthenticated attacker toexecute commands and accessdata through an interactiveoperating-system shell. This isdue to a missing comma in theBLOCKED_PATTERNS…Where it standsPublic proof of conceptCONNECTS TOSame weaknessCWE-185 (CWE-185)2 other warnings in 30 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

mercury: Amber, patch this week. A vulnerability in Mercury allows an unauthenticated attacker to execute commands and access data through an interactive operating-system shell. This is due to a missing comma in the BLOCKED_PATTERNS regular-expression literals.

The flaws

  • CVE-2026-111057: Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass (CVSS 10.0 · EPSS 0%)
  • CVE-2026-111058: Mercury: Unauthenticated Remote Code Execution via /api/kernels (CVSS 9.8 · EPSS 0%)
  • CVE-2026-111059: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML (CVSS 6.1 · EPSS 0%)

The fix

Upgrade mercury: 3.2.4 · 3.2.6 · 3.2.11 or later on your release line

Who is exposed: {'products': ['Mercury'], 'packages': [{'ecosystem': 'pip', 'name': 'mercury', 'vulnerable': '>= 3.0.0, <= 3.2.3', 'patched': '3.2.4'}]}

Where it stands

  • Public proof of concept

Connects to

Why it is Amber

  • CVSS 10.0 critical
  • Remotely exploitable without logging in
  • On your watchlist: PyPI

Affected packages

PackageEcosystemVulnerableFixed in
mercurypip>= 3.0.0, <= 3.2.33.2.4

References

Original description

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blocklist and reach Jupyter Server's terminal API. An unauthenticated attacker can use the resulting interactive operating-system shell to execute commands and access data available to the Mercury process. This issue is fixed in version 3.2.4.

Last activity 19 Oct 2026. Patch Forecast updates every hour.