Is CVE-2026-44181 actively exploited?

No active exploitation of CVE-2026-44181 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-44181 be exploited remotely?

Yes. CVE-2026-44181 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-44181?

CVE-2026-44181 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2026-44181

CRITICAL

CVE-2026-44181

CWE-1336Published: July 16, 2026· Updated: Jul 16, 2026

10.0

CVSS v3.1

Official Description

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, prior to 3.3.0, the environment variables (KERNEL_XXX) used during the rendering of the Kubernetes manifest are vulnerable to Server Side Template Injection (SSTI). By including Jinja2 template expressions it is possible to execution Python code and OS Commands in the Enterprise Gateway service. The code can use or steal the Kubernetes service account token, which can steal Kubernetes secrets and be used to fully compromise the Kubernetes cluster by scheduling a privileged pod or a pod with a hostPath volume mount. This issue has been fixed in version 3.3.0.

NVD Source

Risk Analysis

This critical vulnerability in Jupyter Enterprise Gateway allows attackers to execute arbitrary code and OS commands by injecting Jinja2 template expressions into environment variables. This Server Side Template Injection (SSTI) can lead to the compromise of Kubernetes clusters by stealing service account tokens and secrets. The CVSSv4 score of 10.0 highlights the extreme severity and ease of exploitation.

No public exploit is currently known for this vulnerability. However, the attack vector is network-based with low attack complexity, indicating it is remotely exploitable.

Recommended Action

To mitigate this vulnerability, upgrade Jupyter Enterprise Gateway to version 3.3.0 or later. This update addresses the SSTI flaw by properly sanitizing environment variables.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2026-44181 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X