Server Side Template Injection in Jupyter Enterprise Gateway for Apache Spark and Kubernetes
CVE-2026-44181

10CRITICAL

Key Information:

Vendor

Jupyter-server

Status
Enterprise Gateway
Vendor
CVE Published:
16 July 2026

What is CVE-2026-44181?

Jupyter Enterprise Gateway, which facilitates launching remote Jupyter Notebook kernels across distributed systems such as Kubernetes and Docker Swarm, is susceptible to Server Side Template Injection (SSTI) in versions prior to 3.3.0. The vulnerability arises when environment variables (KERNEL_XXX) used for rendering Kubernetes manifests are manipulated through Jinja2 template expressions. This allows attackers to execute arbitrary Python code and system commands, potentially granting access to Kubernetes service account tokens. With these tokens, attackers can extract sensitive Kubernetes secrets and escalate their privileges to fully compromise the cluster, endangering its integrity and security. The issue has been addressed and resolved in version 3.3.0.

Affected Version(s)

enterprise_gateway >= 2.0.0rc2, < 3.3.0

References

https://github.com/jupyter-server/enterprise_gateway/secu...
x_refsource_CONFIRM
https://github.com/jupyter-server/enterprise_gateway/rele...
x_refsource_MISC

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.