CVE-2026-123286

Description

In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token

Affected Platforms

Weakness Type

CWE-863

References

• https://www.jetbrains.com/privacy-security/issues-fixed/