In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session
CWE-672