Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA EN FR

Medium 5.9

In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file...

CVE-2026-123286 First seen on SecPulse Nov 6, 19:27

Affected packages

Ecosystem	Package	Affected	Fixed
JetBrains	Datalore	< 2026.4	2026.4

Original description The description as published by the source.

In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 5.9; CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Published: Nov 6, 2026
First seen on SecPulse: Nov 6, 19:27
GHSA: GHSA-8rp7-pxgq-3pgc
CWE: CWE-863

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-863

Vendors

Jetbrains

All

Datalore

Detection sources

NIST National Vulnerability DatabaseNov 6, 20:17
GitHub Security Advisories (Global)Nov 6, 21:30
CVE.org (CVE Program・cvelistV5)Nov 6, 19:27

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details