JetBrains Datalore vulnerabilities

In JetBrains Datalore before 2026.4, API tokens and sessions of removed or banned users remained valid. This means revoking a user's access did not invalidate their active session or token.

In JetBrains Datalore before 2026.4, improper owner validation allowed reading another workspace's issues and runs notebook.

In JetBrains Datalore before 2026.4, hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint.

In JetBrains Datalore before 2026.4, improper authorisation allowed notebook viewers to modify files.

In JetBrains Datalore before 2026.4, stored XSS in notebook charts was possible via Vega editor link.

In JetBrains Datalore before 2026.4, private notebook files could be downloaded without authentication via published interactive reports.

In JetBrains Datalore before 2026.4, improper authorisation allowed reading the notebook owner's file storage session token.

In JetBrains Datalore before 2026.3, command execution was possible in the database task container via JVM options injection.

In JetBrains Datalore before 2026.4, improper authorization on workspace moves allowed view-only collaborators to modify shared content.

In JetBrains Datalore before 2026.4, account takeover was possible via SSO sign-in to a pre-registered account.

In JetBrains Datalore before 2026.4, missing expiration validation of account tokens allowed a new authenticated session to be created using an expired token.

In JetBrains Datalore before 2026.4, notebook code could execute commands in the sidecar container via the mount broker.

In JetBrains Datalore before 2026.2.4, unauthenticated users could execute code via published interactive reports.

JetBrains Datalore before version 2026.2.1 contains an unauthenticated path traversal vulnerability via the report blob endpoint, allowing reading of arbitrary files. This may lead to disclosure of sensitive information.

In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators.