CVE-2026-123834
Received Received - Intake

Improper Scope Validation in JetBrains Datalore

Publication date: 2026-11-06

Last updated on: 2026-11-06

Assigner: JetBrains s.r.o.

Description
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-06
Last Modified
2026-11-06
Generated
2026-11-06
AI Q&A
2026-11-06
EPSS Evaluated
N/A
NVD
CVE-2026-123834
EUVD
EUVD-2026-118337

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
JetBrains Datalore From 0 (inc) to 2026.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in JetBrains Datalore before 2026.4 involves improper scope validation in database tasks. It allows an attacker to use another workspace's service account, potentially gaining unauthorized access to sensitive data or resources.

Impact Analysis

This vulnerability could lead to unauthorized access to your workspace's data or resources. Attackers might exploit it to steal sensitive information, manipulate data, or disrupt services. The impact depends on the data stored in the affected workspace.

Compliance Impact

This vulnerability could violate compliance requirements such as GDPR or HIPAA by enabling unauthorized access to personal or health data. Organizations may face legal penalties, reputational damage, and loss of trust if such breaches occur due to inadequate security controls.

Mitigation Strategies

Update JetBrains Datalore to version 2026.4 or later to address the improper scope validation issue in database tasks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-123834. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...