CVE-2026-44181

Name of the Vulnerable Software and Affected Versions Jupyter Enterprise Gateway versions 2.0.0rc2 through 3.2.x

Description Environment variables used during the rendering of the Kubernetes manifest are vulnerable to Server Side Template Injection (SSTI), a flaw where an attacker injects malicious template expressions to manipulate the application's output or execute code. By including Jinja2 template expressions in variables such as KERNEL POD NAME and KERNEL WORKING DIR via the /api/kernels endpoint, an attacker can execute Python code and OS commands within the Enterprise Gateway service. This can lead to the theft of the Kubernetes service account token, allowing the attacker to access Kubernetes secrets and fully compromise the cluster by scheduling privileged pods or pods with a hostPath volume mount.

Recommendations Update Jupyter Enterprise Gateway to version 3.3.0. Restrict the use of KERNEL XXX environment variables in API calls to the /api/kernels endpoint until the update is applied.