How to use this reference
The advisory and 3.3.0 release identify that version as patched. Editorial lesson: keep trusted template structure separate from external configuration and avoid evaluating configuration as template source. Name normalization and output escaping do not establish that separation. Review the deployed fixed version and its intended data-only substitution behavior. Restricting gateway access and service-account authority provides defense in depth; neither replaces correction of the template boundary.
Before reading
- Data/code separation and server-side template concepts
- Kubernetes workload identities and configuration trust boundaries
Context and limits
- Applicability requires Kubernetes-backed Enterprise Gateway and the ability to supply kernel-start configuration. The no-privileges severity rating does not establish universal deployment reachability.
- The affected-version field states >= v2.0.0rc2 without an upper bound; the patched-version field names 3.3.0. Both source fields are retained rather than silently repairing the range.
- Broader cluster impact depends on effective service-account permissions and deployment isolation. Complete cluster compromise and production exploitation are not established by the published demonstration.
- lresende published the advisory and is credited for remediation; ben-elttam is credited as Reporter. No separate author byline was established, so authors remains empty.
- The release notes link remediation pull request 1412, merged August 9, 2025. Its merge date is remediation chronology, not this advisory's publication or an educational-resource edition date.
- The release separately lists Kubernetes manifest injection as CVE-2026-44182; it is not the SSTI case summarized here. No award qualification is established. Learning prerequisites and generalized defensive guidance are editorial.
Sources and provenance
- Jinja2 Template Server Side Template Injection resulting in Remote Code Execution Jupyter Enterprise Gateway maintainers · reviewed 2026-10-05
- Jupyter Enterprise Gateway 3.3.0 Jupyter Enterprise Gateway maintainers · reviewed 2026-10-05
- Fix pod-name substitution to avoid SSTI (pull request 1412) Jupyter Enterprise Gateway maintainers · reviewed 2026-10-05
Record reviewed 2026-10-05. Snapshot cb017eaea66e. Open the complete JSON contract.