Jetbrains Datalore vulnerabilities

• jetbrains datalore In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private... CVE-2026-123836 8.8 HighNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via... CVE-2026-123835 5.9 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using... CVE-2026-123834 7.5 HighNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained... CVE-2026-123292 2.7 LowNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's... CVE-2026-123291 4.3 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via... CVE-2026-123290 5.3 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files CVE-2026-123289 5.4 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link CVE-2026-123288 5.4 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 private notebook files could be downloaded without... CVE-2026-123287 5.9 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file... CVE-2026-123286 5.9 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.3 command execution was possible in the database task container... CVE-2026-123285 6.3 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only... CVE-2026-123284 6.5 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre... CVE-2026-123283 6.8 MediumNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new... CVE-2026-123282 7.4 HighNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container... CVE-2026-123281 7.5 HighNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published... CVE-2026-123280 8.1 HighNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by... CVE-2026-123279 9.0 CriticalNovember 6, 2026
• jetbrains datalore In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint... CVE-2026-111093 7.5 HighOctober 15, 2026
• jetbrains datalore In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure... CVE-2026-32745 6.3 MediumMarch 13, 2026