# CVE-2026-44182: Jupyter Enterprise Gateway YAML injection in Kubernetes manifest rendering

Source: https://junglewise.ai/threats/cve-2026-44182-jupyter-enterprise-gateway-yaml-injection-in-kubernetes-manifest  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-16. Updated: 2026-07-16  
License: CC BY 4.0 with a link back

CVE-2026-44182 · Severity: critical · CVSS 4 · Published 2026-07-16

Jupyter Enterprise Gateway is a tool used to launch and manage computing resources across distributed clusters like Kubernetes and Docker. A security flaw allows attackers to manipulate the configuration files used to create these resources by injecting malicious commands into environment variables. This could allow an attacker to bypass security controls, create unauthorized high-privileged containers, and potentially gain full control over the underlying cluster infrastructure.

Technologies: [Jupyter Enterprise Gateway](https://junglewise.ai/threats/technologies/enterprise-gateway), [jupyter_enterprise_gateway (PyPI)](https://junglewise.ai/threats/technologies/jupyter-enterprise-gateway). Vendors: [Jupyter](https://junglewise.ai/threats/vendors/jupyter), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-44182 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44182 being exploited in the wild.

**How severe is CVE-2026-44182?** Critical severity, with a CVSS score of 4, published 16 July 2026.

**Which products and versions are affected?** Jupyter Enterprise Gateway < 3.3.0; jupyter_enterprise_gateway (PyPI) < 3.3.0, ECOSYSTEM:introduced=0,fixed=3.3.0.

**Is there a fix for CVE-2026-44182?** Yes. jupyter_enterprise_gateway (PyPI): upgrade to 3.3.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-44182 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-44182?** Check whether you run Jupyter Enterprise Gateway or jupyter_enterprise_gateway (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- jupyter_enterprise_gateway (PyPI): upgrade to 3.3.0 or later

  ```sh
  pip install "jupyter_enterprise_gateway>=3.3.0"
  ```


## Technical details

Jupyter Enterprise Gateway prior to version 3.3.0 is vulnerable to YAML injection during the rendering of Kubernetes manifests via Jinja2 templates. The server interpolates untrusted environment variables (prefixed with KERNEL_) into templates without proper YAML-aware escaping. An attacker can provide malicious input through these variables to inject new fields, overwrite existing securityContext keys (where the last defined key prevails), or use YAML document boundaries (---) to define and create entirely new, unauthorized Kubernetes resources such as privileged pods. This vulnerability is exploitable via the API when requesting new kernels. The issue is fixed in version 3.3.0 by implementing proper escaping and validation.

## Affected products

- jupyter-server jupyter_enterprise_gateway < 3.3.0

## Identifiers

- CVE-2026-44182
- GHSA-cfw7-6c5v-2wjq
- PYSEC-2026-362

## Timeline

- 2026-06-01: patched: Version 3.3.0 released
- 2026-06-03: advisory: GitHub Security Advisory published
- 2026-07-16: disclosed: CVE published to NVD

## References

- [https://github.com/jupyter-server/enterprise_gateway/releases/tag/v3.3.0](https://github.com/jupyter-server/enterprise_gateway/releases/tag/v3.3.0)
- [https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-cfw7-6c5v-2wjq](https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-cfw7-6c5v-2wjq)

## Related threats

- [Jupyter Enterprise Gateway SSTI in Kubernetes manifest rendering](https://junglewise.ai/threats/cve-2026-44181-jupyter-enterprise-gateway-ssti-in-kubernetes-manifest-rendering)
- [Jupyter Enterprise Gateway UID/GID restriction bypass in ContainerProcessProxy](https://junglewise.ai/threats/cve-2026-44180-jupyter-enterprise-gateway-uid-gid-restriction-bypass-in)