CVE-2026-111093

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

CVE-2026-111093

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

CVE-2026-111093

JetBrains Datalore versions prior to 2026.2.1 are vulnerable to an unauthenticated path traversal vulnerability within the report blob endpoint . This flaw, categorized as CWE-23 , allows an attacker to perform arbitrary file reading on the system. The vulnerability has a CVSS 3.1 score of 7.5 (H...

JetBrains Datalore Session Interception

The vulnerability of the data analysis platform JetBrains Datalore lies in the absence of the “secure” attribute in the cookie settings. Exploiting this vulnerability allows a remote attacker to intercept sessions...

CVE-2026-32745

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...

EUVD-2026-12045

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...

CVE-2026-32745

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...

CVE-2026-32745

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...

CVE-2026-32745

JetBrains Datalore is affected prior to version 2026.1. The vulnerability arises from missing the Secure attribute on cookie settings, enabling session hijacking. No exploit details are provided in the documents. Affected product: JetBrains Datalore; root cause: cookie security attribute misconfi...

PT-2026-25323

CVE-2026-32745 In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings https://t.co/5G9cZc08Tr...

JetBrains Datalore security vulnerabilities

JetBrains Datalore is a collaborative data science platform developed by the Czech company JetBrains. Versions of JetBrains Datalore prior to 2026.1 contained a security vulnerability caused by the lack of security attributes in Cookie settings, which could lead to session hijacking...

CVE-2026-32745: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings...