YAML injection in jupyter-server/enterprise_gateway (CVE-2026-44182)

CVE-2026-44182 is a YAML injection vulnerability in jupyter-server/enterprise_gateway affecting Kubernetes manifest rendering via Jinja2 templates. The server interpolates untrusted `KERNEL_XXX` environment variables into Kubernetes manifests without YAML-aware escaping, allowing attackers to overwrite critical fields such as `securityContext` (enabling privilege escalation to root), inject document boundaries to create arbitrary additional Kubernetes resources, and potentially compromise entire Kubernetes clusters through privileged pod creation, kernel module loading, or hostPath volume mount abuse. Affected versions: - <= 3.2.3 We recommend updating to: 3.3.0. CVSS 10.0 · our assessment: act_now Vendor advisory: https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-cfw7-6c5v-2wjq Details: https://vuln.today/cve/CVE-2026-44182