Description
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Datalore | < 2026.1 | 2026.1 |
Medium · 6.3
CVE-2026-32745
EUVD-2026-12045
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
Published Mar 13, 2026 · Updated Mar 17, 2026 · Assigned by JetBrains