JetBrains Datalore 2026.2.3 Remote Code Execution

JetBrains Datalore On-Premises version 2026.2.3 contains an authorization flaw in publicly shared interactive reports. An unauthenticated remote attacker with access to a public report can have READ permissions incorrectly mapped to EXECUTE permissions, allowing access to computation RPC methods...