Dashboard / CVE-2026-123835

CVE-2026-123835

MEDIUM
MEDIUM Priority: 0.04 BB Relevance: 52/100
Published: 2026-11-06 Modified: 2026-11-12 First seen: 2026-11-06 Status: active

Attack Surface

Network No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: Unchanged
C: High
I: Low
A: None

Description

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
JetBrains Datalore 0 < 2026.4
JetBrains Datalore 0 < 2026.4
jetbrains datalore < 2026.4

References & Advisories (1)

Bug Bounty Relevance

52 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

5.9 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS — Exploitation Probability

0.66%
Raw Score 0.006640
Percentile 52.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00664
2026-11-12
0.00649
2026-11-10
0.00649
2026-11-09
0.00649
2026-11-08
0.00649
2026-11-07
0.00649

Intelligence Sources

mitre ref →
nvd ref →

External Links