In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
CWE-88