CVE-2026-44181Disclosure(jupyter / enterprise_gateway)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, prior to 3.3.0, the environment variables (KERNEL_XXX) used during the rendering of the Kubernetes manifest are vulnerable to Server Side Template Injection (SSTI). By including Jinja2 template expressions it is possible to execution Python code and OS Commands in the Enterprise Gateway service. The code can use or steal the Kubernetes service account token, which can steal Kubernetes secrets and be used to fully compromise the Kubernetes cluster by scheduling a privileged pod or a pod with a hostPath volume mount. This issue has been fixed in version 3.3.0.

jupyter CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

https://github.com/jupyter-server/enterprise_gateway/releases/tag/v3.3.0

Weakness type (CWE)

CWE-1336

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

enterprise_gateway

Threat summary

4 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
Peaked 3d ago at 1 mentions (2026-06-04); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

jupyter

Products

enterprise_gateway

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 4d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Full discourse4 posts

BnSnK@BunSnack135d
Disclosure
CVE-2026-44181 (CVSS 10.0): Jupyter Enterprise Gateway SSTI → RCE. Jinja2 template injection via KERNEL_* env vars. Unauthenticated attacker steals K8s service account token, compromises entire cluster. https://nvd.nist.gov/vuln/detail/CVE-2026-44181
Post summary
The statement announces a CVSS‑10.0 vulnerability in Jupyter Enterprise Gateway that permits unauthenticated attackers to perform Jinja2 SSTI via environment variables, gain remote code execution, and exfiltrate Kubernetes service‑account tokens, effectively compromising the entire cluster.
0002013
6 followersView on X
Autumn Good@autumn_good_35130d
Disclosure
CVE-2026-44182, CVE-2026-44181, CVE-2026-44180 Critical Jupyter Enterprise Gateway Vulnerabilities Enable Full Kubernetes Cluster Takeover https://orca.security/resources/blog/jupyter-enterprise-gateway-vulnerabilities/
Post summary
The text announces the discovery of critical Jupyter Enterprise Gateway vulnerabilities that could allow full Kubernetes cluster takeover, but it provides no further technical, exploit, or mitigation details.
00001403
6.9K followersView on X
takenaka hiroya@Joe_Biden_ja65d
Disclosure
Jupyter Enterprise Gateway の 3.3.0 未満に CVSS 10 の SSTI。KERNEL_ で始まる環境変数が Kubernetes マニフェストの Jinja2 テンプレートに展開され、Gateway 上で任意コードが動く。そこからサービスアカ… https://cve.autoarticles.net/cve/CVE-2026-44181
Post summary
The post announces a CVE‑2026‑44181 vulnerability in Jupyter Enterprise Gateway versions below 3.3.0, describing a templating SSTI that allows arbitrary code execution through environment variables, but offers no PoC, exploit code, or patch information.
0000071
563 followersView on X
DailyCVE@dailycve137d
Disclosure
🔴 Jupyter Enterprise Gateway SSTI RCE, #CVE‑2026‑44181 (Critical) -DC-Jun2026-203 https://dailycve.com/jupyter-enterprise-gateway-ssti-rce-cve-2026-44181-critical-dc-jun2026-203/
Post summary
The text announces a newly identified critical vulnerability (CVE‑2026‑44181) in Jupyter Enterprise Gateway that allows SSTI-based remote code execution, but it contains no evidence of a PoC, exploit tool, active exploitation, or patch information.
0000051
208 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	jupyter	enterprise_gateway	-	-	-
App	jupyter	enterprise_gateway	2.0.0	-	-
App	jupyter	enterprise_gateway	2.0.0	-	-

Explore more

Back to dashboard jupyter CVEs enterprise_gateway vulnerabilities

What researchers are saying

CVE-2026-44181

BnSnK@BunSnackDisclosure

The statement announces a CVSS‑10.0 vulnerability in Jupyter Enterprise Gateway that permits unauthenticated attackers to perform Jinja2 SSTI via environment variables, gain remote code execution, and exfiltrate Kubernetes service‑account tokens, effectively compromising the entire cluster.

Autumn Good@autumn_good_35Disclosure

The text announces the discovery of critical Jupyter Enterprise Gateway vulnerabilities that could allow full Kubernetes cluster takeover, but it provides no further technical, exploit, or mitigation details.

takenaka hiroya@Joe_Biden_jaDisclosure

The post announces a CVE‑2026‑44181 vulnerability in Jupyter Enterprise Gateway versions below 3.3.0, describing a templating SSTI that allows arbitrary code execution through environment variables, but offers no PoC, exploit code, or patch information.

DailyCVE@dailycveDisclosure

The text announces a newly identified critical vulnerability (CVE‑2026‑44181) in Jupyter Enterprise Gateway that allows SSTI-based remote code execution, but it contains no evidence of a PoC, exploit tool, active exploitation, or patch information.