Jupyter Enterprise Gateway flaw lets notebook users hijack Kubernetes clusters
Researchers uncovered three CVE‑rated vulnerabilities in Jupyter Enterprise Gateway that let any notebook user escalate to full cluster admin, read secrets, mount host filesystems, and spawn privileged pods. The issue stems from a privileged service account the gateway uses to launch kernels. A patched release (v3.3.0) is now available.