diff --git a/.changeset/jupyter-unix-socket.md b/.changeset/jupyter-unix-socket.md
new file mode 100644
index 00000000..b5b2ed6c
--- /dev/null
+++ b/.changeset/jupyter-unix-socket.md
@@ -0,0 +1,5 @@
+---
+'@e2b/code-interpreter-template': patch
+---
+
+Isolate Jupyter behind a private Unix socket (`/run/e2b-jupyter/server.sock`, mode `0600`) instead of TCP port 8888, so Jupyter's HTTP API, kernel WebSockets, and interrupts are no longer reachable over the sandbox network interface.