CVE-2026-111093
CVE-2026-111093
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files
CVSS 7.5 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
datalore
- Versions
- ≥ 0, < 2026.2.1: Affected (semver)
Update to 2026.2.1