Loading vulnerability…
On Windows, Jupyter nbconvert (up to and including 7.16.6) is vulnerable to uncontrolled search path execution when converting notebooks containing SVG output to PDF. During jupyter nbconvert --to pdf, nbconvert invokes Inkscape to process SVG; if an attacker can place a malicious inkscape.bat in the user’s current working directory, that batch file may be selected/executed unexpectedly (search-order hijack), resulting in arbitrary code execution in the context of the user running nbconvert. The issue is fixed in nbconvert 7.17.0.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
jupyter nbconvert --to pdf. This can lead to compromise of the workstation and access to data available to that user (e.g., notebooks, datasets, and potentially cached credentials present in the user environment).If you can’t patch tonight, do this now.
jupyter nbconvert --to pdf from untrusted/shared directories and ensure the current working directory does not contain attacker-controlled executables (notably inkscape.bat). Prefer running conversions from a trusted directory and harden execution/search-path behavior so Inkscape is invoked via a fully qualified path and not resolved from the CWD (e.g., environment hardening such as setting NoDefaultCurrentDirectoryInExePath).Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A local code execution vulnerability in Jupyter nbconvert (up to and including 7.16.6 on Windows) allows arbitrary code execution when converting notebooks with SVG output to PDF, due to uncontrolled search path and execution of a malicious inkscape.bat file.
A vulnerability in Jupyter nbconvert on Windows allows arbitrary code execution when exporting a notebook to PDF. The issue arises from unsafe search path handling for the Inkscape executable, enabling attackers to place a malicious executable in the working directory and have it executed with user privileges.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.