Server Side Template Injection (SSTI) in Jupyter Enterprise Gateway (CVE-2026-44181)

CVE-2026-44181 is a Server Side Template Injection (SSTI) vulnerability in Jupyter Enterprise Gateway affecting the rendering of Kubernetes manifest environment variables (`KERNEL_XXX`). An attacker can inject Jinja2 template expressions via the API to achieve remote code execution of Python code and OS commands within the Enterprise Gateway pod. Successful exploitation enables theft of the Kubernetes service account token, which carries broad read/write permissions over cluster resources (pods, secrets, configmaps, persistent volumes, and more), enabling full cluster compromise. Affected versions: - >= v2.0.0rc2 We recommend updating to: 3.3.0. CVSS 10.0 · our assessment: act_now Vendor advisory: https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-f49j-v924-fx9w Details: https://vuln.today/cve/CVE-2026-44181