CVE-2026-123281
HighCVSS 7.5Summary
In JetBrains Datalore before 2026.4, notebook code could execute commands in the sidecar container via the mount broker.
Risk Assessment
A user able to run notebooks can execute arbitrary commands in the sidecar container, potentially breaking environment isolation and leading to privilege escalation.
Recommendation
Upgrade JetBrains Datalore to version 2026.4 or later to restrict command execution through the mount broker.
Other vulnerabilities in JetBrains Datalore
See all- CVE-2026-123292Low
In JetBrains Datalore before 2026.4, API tokens and sessions of removed or banned users remained valid. This means revoking a user's access did not invalidate their active session or token.
- CVE-2026-123291Medium
In JetBrains Datalore before 2026.4, improper owner validation allowed reading another workspace's issues and runs notebook.
- CVE-2026-123290Medium
In JetBrains Datalore before 2026.4, hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint.
- CVE-2026-123289Medium
In JetBrains Datalore before 2026.4, improper authorisation allowed notebook viewers to modify files.
- CVE-2026-123288Medium
In JetBrains Datalore before 2026.4, stored XSS in notebook charts was possible via Vega editor link.
- CVE-2026-123287Medium
In JetBrains Datalore before 2026.4, private notebook files could be downloaded without authentication via published interactive reports.
- CVE-2026-123286Medium
In JetBrains Datalore before 2026.4, improper authorisation allowed reading the notebook owner's file storage session token.
- CVE-2026-123285Medium
In JetBrains Datalore before 2026.3, command execution was possible in the database task container via JVM options injection.
- CVE-2026-123284Medium
In JetBrains Datalore before 2026.4, improper authorization on workspace moves allowed view-only collaborators to modify shared content.
- CVE-2026-123283Medium
In JetBrains Datalore before 2026.4, account takeover was possible via SSO sign-in to a pre-registered account.
Original NVD description (English source)
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
Vulnerability data from NVD (NIST) · CISA KEV · EPSS