Description
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Datalore | < 2026.2.1 | 2026.2.1 |
High · 7.5
CVE-2026-111093
EUVD-2026-102146GHSA-qc35-4c86-pcqq
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files
Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by JetBrains