PT-2026-46124 · Project Jupyter · Jupyter-Enterprise-Gateway
CVE-2026-44180
·
Published
2026-06-03
·
Updated
2026-07-17
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Jupyter Enterprise Gateway (affected versions not specified)
Description
An input validation issue exists in the prohibited UID and GID feature, which is designed to prevent launching kernels with root privileges (UID or GID 0). An attacker can bypass these checks by providing specially crafted values for the
KERNEL UID or KERNEL GID variables, such as including trailing whitespace (e.g., "0 "). While the validation check fails to identify these as prohibited, the subsequent parsing in the Kubernetes manifest ignores the whitespace and executes the kernel as root.This can be exploited via the
/api/kernels endpoint. Running kernels as root increases the attack surface and may lead to container escapes, potentially compromising the worker node and the entire Kubernetes cluster, especially if hostPath read/write volume mounts are permitted.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
LPE
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Jupyter-Enterprise-Gateway