JupyterLab's ImageViewer component can be tricked into executing arbitrary JavaScript by loading a specially crafted SVG image. The flaw occurs when URL.createObjectURL is used and the blob URL is revoked too early, allowing the image to retain an executable same‑origin context. When the image is opened and then redirected to a new browser tab, the embedded script runs with the privileges of the JupyterLab server, enabling remote code execution. This vulnerability is a classic cross‑site scripting flaw classified as CWE‑79 and a form of improper authorization flaw classified as CWE‑911.

The issue affects JupyterLab releases prior to 4.5.10 and 4.6.2. Any installation using those versions is vulnerable when the image viewer is used to open malicious SVG files.

The likely attack vector requires an attacker to supply a malicious SVG file that the victim opens in the image viewer and then opens in a new tab. The exploitation condition depends on user interaction or compromised image files. The vulnerability exploits both cross‑site scripting (CWE‑79) and improper authority control (CWE‑911), allowing the embedded script to run with the privileges of the JupyterLab server. The CVSS score of 7.5 indicates a high severity, and the EPSS score of 0.00574 (less than 1%) indicates a low but non‑zero likelihood of exploitation. The lack of listing in CISA KEV suggests the issue has not yet been widely exploited. Nevertheless, the possibility of remote code execution warrants immediate mitigation.