CVE-2026-44182
published 2026-07-16CVE-2026-44182: Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions…
PriorityP265critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
0.63%
48.2th percentile
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions prior to 3.3.0, the server interpolates untrusted environment variables (e.g., KERNEL_XXX) into Kubernetes manifests without YAML-aware escaping, enabling YAML injection attacks. Attackers can inject new fields, overwrite critical fields (e.g., duplicate securityContext keys, where the last one prevails), and inject document boundaries (--- for new documents, ... for end-of-document) to generate multiple resources, potentially creating arbitrary types, such as privileged pods. The Jinja2 template for the Kubernetes manifest contains several kernel_xxx variables, such as kernel_working_dir that are used when rendering the manifest and are all vectors for YAML injection. This issue has been fixed in version 3.3.0.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jupyter-server | enterprise_gateway | < 3.3.0 | 3.3.0 |
| jupyter | enterprise_gateway | < 3.3.0 | 3.3.0 |
CVSS provenance
nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv4.010.0CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
jupyter-server Enterprise Gateway up to 3.2.x Kubernetes Manifest Renderer special elements used in a template engine
vuldb·2026-07-17·CVSS 10.0
CVE-2026-44182 [CRITICAL] jupyter-server Enterprise Gateway up to 3.2.x Kubernetes Manifest Renderer special elements used in a template engine
A vulnerability marked as problematic has been reported in jupyter-server Enterprise Gateway up to 3.2.x. Affected by this issue is some unknown functionality of the component Kubernetes Manifest Renderer. Performing a manipulation results in improper neutralization of special elements used in a template engine.
This vulnerability is reported as CVE-2026-44182. The attack is possible to be carried out remotely. No exploit exists.
GHSA
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
ghsa·2026-06-03
CVE-2026-44182 [CRITICAL] CWE-74 Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
### Summary
The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like `securityContext` and inject multi-document YAML to create additional unintended Kubernetes resources.
### Details
The server interpolates untrusted environment variables (e.g., `KERNEL_XXX`) into Kubernetes manifests without YAML-aware escaping, enabling YAML injection attacks. Attackers can inject new fields, overwrite critical fields (e.g., duplicate `securityContext` keys, where the last one prevails), and inject document boundaries (`---` for new documents, `...` for end-of-document) to generate multiple resources, potentially creatin
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-16
Published