Code Execution Vulnerability in JetBrains Datalore Affects Unauthenticated Users
CVE-2026-123280

8.1HIGH

Key Information:

Vendor

Jetbrains
Status
Datalore
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123280?

A security weakness in JetBrains Datalore allows unauthenticated users to execute arbitrary code through published interactive reports. This vulnerability impacts versions of Datalore prior to 2026.2.4, raising concerns over unauthorized access and potential exploits by malicious actors.

Affected Version(s)

Datalore 0 < 2026.2.4

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.