CVE-2026-123284: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A view-only collaborator in an affected JetBrains Datalore workspace can exploit it. Exploitation requires network access and already having high privileges within the relevant authorization context.

What impact can successful exploitation have?

The issue can allow a view-only collaborator to modify shared content through improper authorization on workspace moves. The provided severity vector indicates integrity and availability impact, with no confidentiality impact.

Which versions are affected?

JetBrains Datalore versions before 2026.4 are affected. Upgrade to 2026.4 or a later version.

CVE-2026-123284: Medium severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact can successful exploitation have?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact can successful exploitation have?

Which versions are affected?