CVE-2026-123834

In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account...

CVE-2026-123834

In JetBrains Datalore versions prior to 2026.4 , an improper scope validation within database tasks allows an attacker to utilize a service account from a different workspace. This authorization bypass (CWE-639) can result in high impacts on confidentiality, integrity, and availability. No specif...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the serviceAccountName field in the Kubernetes backend configuration. An attacker can gain elevated privileges by specifying an arbitrary ServiceAccount, allowing access to sensitive resources and potential ful...