In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reports
CWE-863