Vulnerability Details CVE-2026-123290
In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 25.1%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-123290
-
cpe:2.3:a:jetbrains:datalore:2022.3.1
-
cpe:2.3:a:jetbrains:datalore:2023.1
-
cpe:2.3:a:jetbrains:datalore:2023.2
-
cpe:2.3:a:jetbrains:datalore:2023.3
-
cpe:2.3:a:jetbrains:datalore:2023.3.1
-
cpe:2.3:a:jetbrains:datalore:2023.4
-
cpe:2.3:a:jetbrains:datalore:2023.5
-
cpe:2.3:a:jetbrains:datalore:2023.5.1
-
cpe:2.3:a:jetbrains:datalore:2023.6
-
cpe:2.3:a:jetbrains:datalore:2024.1
-
cpe:2.3:a:jetbrains:datalore:2024.2
-
cpe:2.3:a:jetbrains:datalore:2024.2.1
-
cpe:2.3:a:jetbrains:datalore:2024.2.2
-
cpe:2.3:a:jetbrains:datalore:2024.2.3
-
cpe:2.3:a:jetbrains:datalore:2024.3
-
cpe:2.3:a:jetbrains:datalore:2024.4
-
cpe:2.3:a:jetbrains:datalore:2024.4.1
-
cpe:2.3:a:jetbrains:datalore:2024.5
-
cpe:2.3:a:jetbrains:datalore:2024.5.1
-
cpe:2.3:a:jetbrains:datalore:2025.1
-
cpe:2.3:a:jetbrains:datalore:2025.2
-
cpe:2.3:a:jetbrains:datalore:2025.3
-
cpe:2.3:a:jetbrains:datalore:2025.3.1
-
cpe:2.3:a:jetbrains:datalore:2025.4
-
cpe:2.3:a:jetbrains:datalore:2025.4.1
-
cpe:2.3:a:jetbrains:datalore:2025.5
-
cpe:2.3:a:jetbrains:datalore:2025.5.1
-
cpe:2.3:a:jetbrains:datalore:2025.6
-
cpe:2.3:a:jetbrains:datalore:2025.6.1
-
cpe:2.3:a:jetbrains:datalore:2025.6.2
-
cpe:2.3:a:jetbrains:datalore:2026.1
-
cpe:2.3:a:jetbrains:datalore:2026.1.1
-
cpe:2.3:a:jetbrains:datalore:2026.2
-
cpe:2.3:a:jetbrains:datalore:2026.2.1
-
cpe:2.3:a:jetbrains:datalore:2026.2.2
-
cpe:2.3:a:jetbrains:datalore:2026.2.3
-
cpe:2.3:a:jetbrains:datalore:2026.2.4
-
cpe:2.3:a:jetbrains:datalore:2026.3