CVE-2026-44182Active Exploitation(jupyter / enterprise_gateway)

MEDIUMCVSS 10.0 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch jupyter enterprise_gateway systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions prior to 3.3.0, the server interpolates untrusted environment variables (e.g., KERNEL_XXX) into Kubernetes manifests without YAML-aware escaping, enabling YAML injection attacks. Attackers can inject new fields, overwrite critical fields (e.g., duplicate securityContext keys, where the last one prevails), and inject document boundaries (--- for new documents, ... for end-of-document) to generate multiple resources, potentially creating arbitrary types, such as privileged pods. The Jinja2 template for the Kubernetes manifest contains several kernel_xxx variables, such as kernel_working_dir that are used when rendering the manifest and are all vectors for YAML injection. This issue has been fixed in version 3.3.0.

jupyter CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

https://github.com/jupyter-server/enterprise_gateway/releases/tag/v3.3.0

Weakness type (CWE)

CWE-74

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

enterprise_gateway

Threat summary

Active exploitation appears in 2 classified signals
Patch or workaround signal is available
5 mentions across 4 observed days
Momentum state: stable

What's happening

Active exploitation reported across 2 signals
Patch or workaround mentioned in 3 signals
Technical details provided in 4 signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-06-09); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

jupyter

Products

enterprise_gateway

Deep dive

Activity timeline5 mentions / 4d

Signal classification4 categories

Active Exploitation

240.0%

Patch

120.0%

General

120.0%

Disclosure

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-04	1	Patch1
2026-06-09	2	Active Exploitation2
2026-06-11	1	General1
2026-08-14	1	Disclosure1

Full discourse5 posts

Autumn Good@autumn_good_35129d
General
CVE-2026-44182, CVE-2026-44181, CVE-2026-44180 Critical Jupyter Enterprise Gateway Vulnerabilities Enable Full Kubernetes Cluster Takeover https://orca.security/resources/blog/jupyter-enterprise-gateway-vulnerabilities/
Post summary
The text merely lists three CVE identifiers and a headline about critical vulnerabilities in Jupyter Enterprise Gateway, with no detailed technical information, PoC, or exploitation evidence provided.
00001403
6.9K followersView on X
takenaka hiroya@Joe_Biden_ja65d
Disclosure
同じ Jupyter Enterprise Gateway にもう1件、CVSS 10 の YAML インジェクション。環境変数がエスケープなしでマニフェストに埋まるので、キーの重複やドキュメント境界を差し込まれて特権 Pod を作られる。テンプレート式を弾くだけでは止まらない… https://cve.autoarticles.net/cve/CVE-2026-44182
Post summary
The post announces CVE‑2026‑44182, a CVSS 10 YAML injection in Jupyter Enterprise Gateway, explaining how unescaped environment variables can craft privileged pod manifests via duplicate keys and document boundary tricks.
0000074
563 followersView on X
PurpleOps@PurpleOps_io131d
Active Exploitation
your ML platform is cluster-adjacent infra, and attackers know it: two CVSS 10 flaws in Jupyter Enterprise Gateway (CVE-2026-44182 and -44181) reported exploited - Jinja2 injection to privileged pods, plus template RCE that steals the k8s service-account token. patch JEG and rotate the token. https://securityonline.info/jupyter-gateway-vulnerabilities/
Post summary
Two CVSS 10 flaws in Jupyter Enterprise Gateway (CVE-2026-44182 and -44181) have been actively exploited via Jinja2 injection and template RCE to steal Kubernetes service‑account tokens, with a patch and token rotation advised.
0000082
598 followersView on X
PurpleOps@PurpleOps_io131d
Active Exploitation
your ML platform is cluster-adjacent infra, and attackers know it: two CVSS 10 flaws in Jupyter Enterprise Gateway (CVE-2026-44182 and -44181) reported exploited - Jinja2 injection to privileged pods, plus template RCE that steals the k8s service-account token. patch JEG and rotate the token. https://securityonline.info/jupyter-gateway-vulnerabilities/
Post summary
Both CVEs in Jupyter Enterprise Gateway, rated CVSS 10, are being actively exploited via Jinja2 injection and template RCE, necessitating immediate patching and token rotation.
0000082
598 followersView on X
Upwind Security MDR@UpwindMDR136d
Patch
🚨Critical - Jupyter Enterprise Gateway Kubernetes Manifest Injection (CVE-2026-44182) Jupyter Enterprise Gateway contains a critical Kubernetes manifest injection vulnerability via unsafe Jinja2 template rendering. Environment variables (e.g. KERNEL_XXX) are interpolated without proper YAML escaping, allowing attackers to inject YAML structures, overwrite keys like securityContext, and create additional Kubernetes resources (such as privileged pods). This can lead to full cluster compromise (CVSS 10.0 Critical). 👉Affected: jupyter_enterprise_gateway < 3.3.0 | Upgrade to April 28, 2026 versions
Post summary
CVE-2026-44182 is a critical Kubernetes manifest injection in Jupyter Enterprise Gateway via unsafe Jinja2 template rendering, enabling full cluster takeover; the issue is addressed in the April 28, 2026 patch release.
0000060
196 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	jupyter	enterprise_gateway	-	-	-

Explore more

Back to dashboard jupyter CVEs enterprise_gateway vulnerabilities

What researchers are saying

CVE-2026-44182

PurpleOps[verified]@PurpleOps_ioActive Exploitation

Two CVSS 10 flaws in Jupyter Enterprise Gateway (CVE-2026-44182 and -44181) have been actively exploited via Jinja2 injection and template RCE to steal Kubernetes service‑account tokens, with a patch and token rotation advised.

PurpleOps[verified]@PurpleOps_ioActive Exploitation

Both CVEs in Jupyter Enterprise Gateway, rated CVSS 10, are being actively exploited via Jinja2 injection and template RCE, necessitating immediate patching and token rotation.

Upwind Security MDR[verified]@UpwindMDRPatch

CVE-2026-44182 is a critical Kubernetes manifest injection in Jupyter Enterprise Gateway via unsafe Jinja2 template rendering, enabling full cluster takeover; the issue is addressed in the April 28, 2026 patch release.

Autumn Good@autumn_good_35General

The text merely lists three CVE identifiers and a headline about critical vulnerabilities in Jupyter Enterprise Gateway, with no detailed technical information, PoC, or exploitation evidence provided.

takenaka hiroya@Joe_Biden_jaDisclosure

The post announces CVE‑2026‑44182, a CVSS 10 YAML injection in Jupyter Enterprise Gateway, explaining how unescaped environment variables can craft privileged pod manifests via duplicate keys and document boundary tricks.