CVE-2026-44180 Details
Description
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohibited UID and GID feature that by default prevents launching kernels with UID or GID 0 (root), and this restriction can be bypassed using a specially crafted KERNEL_UID or KERNEL_GID value. This input validation vulnerability allows running Jupyter kernels as root, which can be dangerous as it allows more attack surface, and may lead to container escapes, compromising the worker node and all workloads running on it. Repeated exploitation can compromise all worker nodes, and thus the entire Kubernetes cluster. It is possible to specify volume mounts, so one vector for a container escape is to use a hostPath R/W volume mount, use this UID/GID bypass to run as root, and then gain code execution in the underlying worker node by creating a crontab entry in the mounted host file system. This issue has been fixed in version 3.0.0.
A vulnerability in Jupyter Enterprise Gateway versions 2.0.0rc1 and above prior to 3.3.0 allows users to bypass restrictions that prevent launching Jupyter Notebook kernels as root. This vulnerability arises from improper validation of user ID (UID) and group ID (GID) values. By default, the gateway prohibits UID or GID values of 0, which corresponds to the root user and group. However, this restriction can be circumvented by sending specially crafted KERNEL_UID or KERNEL_GID values that include whitespace, effectively tricking the validation process. Exploiting this vulnerability enables kernels to be executed with root privileges, increasing the risk of container escapes and compromising the underlying worker node and its workloads. In a Kubernetes environment, such exploitation could jeopardize the entire cluster.
Users can upgrade to Jupyter Enterprise Gateway version 3.3.0, which includes a fix by implementing stricter UID and GID validations.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-chq7-94j8-cj28 | CISA-ADP | ExploitVendor Advisory |
| https://github.com/jupyter-server/enterprise_gateway/releases/tag/v3.3.0 | [email protected] | ProductRelease Notes |
| https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-chq7-94j8-cj28 | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| jupyter enterprise gateway | >= 2.1.0, < 3.3.0 2.0.0 - 2.0.0 rc1 2.0.0 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 5, 2026 | Initial Analysis | [email protected] |
| Jul 17, 2026 | CVE Modified | CISA-ADP |
| Jul 16, 2026 | New CVE Received | [email protected] |