CVE-2025-53000 nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
An attacker can execute arbitrary code on Windows by placing a malicious batch file in the current directory when converting notebooks to PDF.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-53000?
CVE-2025-53000 is a high-severity path traversal vulnerability in jupyter nbconvert, published on 17 Dec 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a Windows batch script, capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Windows platform from this directory, the `inkscape.bat` file is run unexpectedly. This issue has been patched in version 7.17.0.
Weakness: CWE-427
Which versions are affected by CVE-2025-53000?
3 open source packages ship an affected version, including nbconvert. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nbconvert PyPI | All versions | 7.17.0 |
nbconvert PyPI | All versions | 7.17.0 |
nbconvert PyPI | All versions | 7.17.0 |
Products include Jupyter Nbconvert.
How do I fix CVE-2025-53000?
Upgrade nbconvert to 7.17.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-53000 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-53000 exists.
Other vulnerabilities in jupyter nbconvert
Sources
Also known as CLEANSTART-2026-TE10956, CLEANSTART-2026-ZJ55298, GHSA-xm59-rqc7-hhvf, PYSEC-2026-1691, UBUNTU-CVE-2025-53000.