Jupyter Gateway Vulnerabilities: Severe CVSS 10 Exploits Uncovered

Researchers disclosed multiple critical vulnerabilities in Jupyter Enterprise Gateway (including CVE-2026-44181, CVE-2026-44182, and CVE-2026-44180) that allow Jinja2 manifest/template injection, unauthenticated remote code execution, container escapes, and UID/GID bypass—enabling attackers to steal service account tokens, create privileged pods, and fully compromise Kubernetes-attached clusters; maintainers released a patch (3.3.0) and administrators are urged to upgrade and audit environment variables and network policies immediately.