{"id":"CVE-2026-123285","kind":"vulnerability","aliases":["CVE-2026-123285"],"related":[],"title":"JetBrains Datalore: JVM option injection allows command execution in database containers","description":"In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection","summary":"Before version 2026.3, JetBrains Datalore let an attacker inject JVM options into the database task container, which allowed command execution there. The sources do not say what access the attacker needs to reach that path.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["datalore","jetbrains","other","self-hosted"],"not_affected_if":["version-2026.3-or-later"],"how_to_check":"- Check the installed Datalore version in the admin console or install directory against `2026.3`","fix":"- JetBrains Datalore: move to `2026.3` or later","status":"open","published_at":"2026-11-06T11:17:06+00:00","first_seen_at":"2026-11-06T11:41:24+00:00","triaged_at":"2026-11-06T11:42:22+00:00","updated_at":"2026-11-06T11:42:22+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-06T11:42:22Z","model":"claude-haiku-5-5","output":{"fix":"- JetBrains Datalore: move to `2026.3` or later","reach":"unknown","title":"JetBrains Datalore: JVM option injection allows command execution in database containers","impact":"high","summary":"Before version 2026.3, JetBrains Datalore let an attacker inject JVM options into the database task container, which allowed command execution there. The sources do not say what access the attacker needs to reach that path.","audience":"businesses","category":"other","nicknames":[],"who_cares":["datalore","self-hosted","jetbrains"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"Commands run inside the database task container","analyst_note":"Confirm the access needed to inject JVM options and the exact affected deployment mode from the JetBrains advisory for CVE-2026-123285.","how_to_check":"- Check the installed Datalore version in the admin console or install directory against `2026.3`\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["version-2026.3-or-later"],"who_is_affected":"Teams that run a self-hosted JetBrains Datalore server with database task containers. The sources do not name the exact configuration or role needed to inject JVM options. Installations already on 2026.3 or later are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000656,"input_tokens":4157,"output_tokens":481,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-123285':14A,17A '-2026':13A,16A '2026.3':26B,63C 'access':51B 'allow':6A,41B 'attack':31B,53B 'command':7A,42B,64C 'contain':11A,39B,72C 'cve':12A,15A 'databas':10A,37B,70C 'datalor':2A,18B,28B,61C 'execut':8A,43B,65C 'host':23B 'inject':5A,32B,76C 'jetbrain':1A,19B,27B,60C 'jvm':3A,33B,74C 'let':29B 'need':54B 'option':4A,34B,75C 'path':58B 'possibl':67C 'reach':56B 'say':49B 'self':22B 'self-host':21B 'sourc':46B 'task':38B,71C 'version':25B 'via':73C","nicknames":[],"mitigations":[],"who_affected":"Teams that run a self-hosted JetBrains Datalore server with database task containers. The sources do not name the exact configuration or role needed to inject JVM options. Installations already on 2026.3 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["datalore","jetbrains","medium","other","selfhosted"],"campaign_type":null,"search_a":"'-123285':14A,17A '-2026':13A,16A 'allow':6A 'command':7A 'contain':11A 'cve':12A,15A 'databas':10A 'datalor':2A 'execut':8A 'inject':5A 'jetbrain':1A 'jvm':3A 'option':4A","search_b":"'2026.3':26B 'access':51B 'allow':41B 'attack':31B,53B 'command':42B 'contain':39B 'databas':37B 'datalor':18B,28B 'execut':43B 'host':23B 'inject':32B 'jetbrain':19B,27B 'jvm':33B 'let':29B 'need':54B 'option':34B 'path':58B 'reach':56B 'say':49B 'self':22B 'self-host':21B 'sourc':46B 'task':38B 'version':25B","search_c":"'2026.3':63C 'command':64C 'contain':72C 'databas':70C 'datalor':61C 'execut':65C 'inject':76C 'jetbrain':60C 'jvm':74C 'option':75C 'possibl':67C 'task':71C 'via':73C","first_public_at":"2026-11-06T11:17:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123285","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123285","severity":null,"published_at":"2026-11-06T11:17:06+00:00","modified_at":"2026-11-06T11:17:06+00:00","first_seen_at":"2026-11-06T11:41:24+00:00","fetched_at":"2026-11-06T11:41:24+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}