Code Execution Vulnerability in JetBrains Datalore
CVE-2026-123279

9CRITICAL

Key Information:

Vendor

Jetbrains
Status
Datalore
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123279?

In JetBrains Datalore prior to version 2026.4, a code execution vulnerability was identified that allowed view-only collaborators to execute code within a notebook's computation context. This flaw could potentially enable unauthorized actions, compromising the integrity of the notebook environment and the data contained within. It emphasizes the importance of proper user permissions and securing notebook functionalities to protect sensitive information from unintended access and manipulation.

Affected Version(s)

Datalore 0 < 2026.4

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.