CVE-2026-123286: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs network access and low-privileged access to the affected Datalore environment. Exploitation does not require user interaction, but the attack complexity is high.

What could an attacker obtain?

The issue could allow an authorized low-privileged attacker to read the notebook owner's file storage session token. The stated impact includes high confidentiality impact and low integrity impact.

Which versions are affected?

JetBrains Datalore versions before 2026.4 are affected. Upgrading to 2026.4 or later addresses the affected version range.

CVE-2026-123286: Medium severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What could an attacker obtain?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could an attacker obtain?

Which versions are affected?