PT-2026-46125 · Unknown+1 · Enterprise Gateway+1

CVE-2026-44181 · Published 2026-06-03 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Enterprise Gateway (affected versions not specified)

Description Server Side Template Injection (SSTI) occurs during the rendering of Kubernetes manifests when using Jinja2, a template engine for Python. By including template expressions in environment variables passed via API calls, an attacker can execute Python code and OS commands within the Enterprise Gateway service. This can lead to the theft of the Kubernetes service account token, allowing the attacker to access secrets, interfere with other Jupyter kernels, and potentially compromise the entire Kubernetes cluster by scheduling privileged pods or pods with hostPath volume mounts.

Technical details include:

• API Endpoint: /api/kernels
• Vulnerable Parameters: KERNEL POD NAME and KERNEL WORKING DIR (and other KERNEL XXX variables)

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2026-44181

GHSA-F49J-V924-FX9W

PYSEC-2026-364

Affected Products

Enterprise Gateway

Jinja2

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44181.json · Exploit
• 🔥 https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-f49j-v924-fx9w · Exploit
• https://osv.dev/vulnerability/CVE-2026-44181 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44181 · Security Note
• https://osv.dev/vulnerability/GHSA-f49j-v924-fx9w · Vendor Advisory
• https://github.com/jupyter-server/enterprise_gateway · Note
• https://github.com/jupyter-server/enterprise_gateway/releases/tag/v3.3.0 · Note
• https://pypi.org/project/jupyter-enterprise-gateway · Note
• https://reddit.com/r/SecOpsDaily/comments/1u20c7a/jupyter_enterprise_gateway · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1twnnbr/resumen_diario_de_vulnerabilidades_04062026 · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1u1z8h5/critical_advisory_jupyter_enterprise_gateway · Reddit Post
• https://github.com/advisories/GHSA-f49j-v924-fx9w · Note
• https://reddit.com/r/VulnMatter/comments/1twnlt9/resumen_diario_de_vulnerabilidades_04062026 · Reddit Post
• https://twitter.com/autumn_good_35/status/2064908661798109358 · Twitter Post