CVE-2026-123834: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

JetBrains Datalore deployments running versions before 2026.4 are affected, specifically where database tasks and workspace service accounts are in use.

What does an attacker need to exploit it?

The issue involves improper scope validation in database tasks that could allow use of a service account belonging to another workspace. The provided information does not state the access level or other prerequisites needed to trigger this behavior.

What should teams do to remediate the issue?

Upgrade JetBrains Datalore to version 2026.4 or later. No temporary mitigation is provided in the available information.

CVE-2026-123834: Security vulnerability

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What should teams do to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What should teams do to remediate the issue?