CVE-2026-44180

Name of the Vulnerable Software and Affected Versions Jupyter Enterprise Gateway versions 2.0.0rc1 through 3.3.0

Description An input validation issue exists in the prohibited UID and GID feature, which is designed to prevent launching kernels with root privileges (UID or GID 0). This restriction can be bypassed by providing specially crafted values for the KERNEL UID or KERNEL GID variables, such as including trailing whitespace (e.g., "0 "). Because these values are later parsed as integers, the whitespace is ignored, allowing the kernel to run as root.

This can lead to container escapes, especially when combined with a hostPath read-write volume mount, enabling an attacker to gain code execution on the underlying worker node by creating a crontab entry. Successful exploitation can compromise the worker node, all workloads running on it, and potentially the entire Kubernetes cluster.

Recommendations Update Jupyter Enterprise Gateway to version 3.0.0. Avoid using the KERNEL UID and KERNEL GID variables in the /api/kernels endpoint until the update is applied.