CVE-2026-123287: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reports

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be prioritized for review?

JetBrains Datalore deployments running versions before 2026.4 that use published interactive reports should be prioritized, because those reports could expose private notebook files.

Does an attacker need an account or user interaction?

No. The vulnerability is described as allowing downloads without authentication, and the supplied vector indicates no privileges or user interaction are required.

What is the expected security impact?

The reported impact is disclosure of private notebook files. The supplied vector indicates high confidentiality impact, with no integrity or availability impact.

CVE-2026-123287: Medium severity vulnerability

Event History

Frequently Asked Questions

Which deployments should be prioritized for review?

Does an attacker need an account or user interaction?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for review?

Does an attacker need an account or user interaction?

What is the expected security impact?