In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
CWE-639