In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection
CWE-88