CVE-2026-123836: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Workspace collaborators could obtain the workspace owner's SSH private key.

The affected Datalore instance must be before version 2026.4, and the issue is associated with Git backup.

Review whether you use JetBrains Datalore before 2026.4 and have workspaces with collaborators and Git backup configured.