Security Vulnerabilities
In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint
CVSS Score
5.3
EPSS Score
0.003
Published
2026-11-06
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
CVSS Score
4.3
EPSS Score
0.003
Published
2026-11-06
In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid
CVSS Score
2.7
EPSS Score
0.003
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
CVSS Score
6.7
EPSS Score
0.001
Published
2026-11-06
In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators
CVSS Score
9.0
EPSS Score
0.003
Published
2026-11-06
In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports
CVSS Score
8.1
EPSS Score
0.004
Published
2026-11-06
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
CVSS Score
7.5
EPSS Score
0.004
Published
2026-11-06
In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session
CVSS Score
7.4
EPSS Score
0.003
Published
2026-11-06
In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account
CVSS Score
6.8
EPSS Score
0.002
Published
2026-11-06
In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content
CVSS Score
6.5
EPSS Score
0.003
Published
2026-11-06