CVE-2026-123281: High severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs low-level privileges in Datalore and must be able to execute notebook code. User interaction is not required after those conditions are met.

Which deployments are affected?

JetBrains Datalore versions before 2026.4 are affected. The provided information does not state whether any particular default configuration changes exposure.

What could exploitation allow?

Notebook code could execute commands in the sidecar container through the mount broker. The reported impact includes compromise of confidentiality, integrity, and availability.

CVE-2026-123281: High severity vulnerability

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which deployments are affected?

What could exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which deployments are affected?

What could exploitation allow?