{"id":"CVE-2026-123834","kind":"vulnerability","aliases":["CVE-2026-123834"],"related":[],"title":"JetBrains Datalore: database tasks let one workspace use another's service account","description":"In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account","summary":"In JetBrains Datalore before 2026.4, database tasks did not check workspace scope, so a task could use the service account of a different workspace. An attacker with access to one workspace could act with the privileges of another.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["datalore","jetbrains","self-hosted","vendor"],"not_affected_if":["no-database-tasks","single-workspace"],"how_to_check":"- Check the installed Datalore version against the fixed version in the product ranges (unknown in the sources)\n- Review which workspaces share database connections and service accounts (unknown in the sources)","fix":"- Datalore: move to `2026.4` or later (from the description: fixed in 2026.4)","status":"open","published_at":"2026-11-06T17:17:21+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","triaged_at":"2026-11-06T17:45:04+00:00","updated_at":"2026-11-06T17:45:04+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-06T17:45:04Z","model":"claude-haiku-5-5","output":{"fix":"- Datalore: move to `2026.4` or later (from the description: fixed in 2026.4)","reach":"unknown","title":"JetBrains Datalore: database tasks let one workspace use another's service account","impact":"high","summary":"In JetBrains Datalore before 2026.4, database tasks did not check workspace scope, so a task could use the service account of a different workspace. An attacker with access to one workspace could act with the privileges of another.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["datalore","jetbrains","self-hosted"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"Actions run under another workspace's service account privileges","analyst_note":"Confirm the affected version range and whether an authenticated low-privilege user is required, from the JetBrains advisory.","how_to_check":"- Check the installed Datalore version against the fixed version in the product ranges (unknown in the sources)\n- Review which workspaces share database connections and service accounts (unknown in the sources)","plain_action":"","needs_analyst":true,"not_affected_if":["single-workspace","no-database-tasks"],"who_is_affected":"Teams that run a self-hosted or managed Datalore instance with multiple workspaces that use database tasks and service accounts. Single-workspace deployments with no shared service accounts are less exposed. Whether the attacker needs an existing account is not stated in the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000682,"input_tokens":4164,"output_tokens":532,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-123834':15A,18A '-2026':14A,17A '2026.4':29B,67C 'access':52B 'account':12A,44B,80C 'act':57B 'allow':74C 'anoth':9A,62B,76C 'attack':50B 'check':34B 'could':40B,56B 'cve':13A,16A 'databas':3A,30B,72C 'datalor':2A,19B,27B,65C 'differ':47B 'host':23B 'improp':68C 'jetbrain':1A,20B,26B,64C 'let':5A 'one':6A,54B 'privileg':60B 'scope':36B,69C 'self':22B 'self-host':21B 'servic':11A,43B,79C 'task':4A,31B,39B,73C 'use':8A,41B,75C 'valid':70C 'vendor':24B 'workspac':7A,35B,48B,55B,77C","nicknames":[],"mitigations":[],"who_affected":"Teams that run a self-hosted or managed Datalore instance with multiple workspaces that use database tasks and service accounts. Single-workspace deployments with no shared service accounts are less exposed. Whether the attacker needs an existing account is not stated in the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["datalore","high","jetbrains","selfhosted","vendor"],"campaign_type":null,"search_a":"'-123834':15A,18A '-2026':14A,17A 'account':12A 'anoth':9A 'cve':13A,16A 'databas':3A 'datalor':2A 'jetbrain':1A 'let':5A 'one':6A 'servic':11A 'task':4A 'use':8A 'workspac':7A","search_b":"'2026.4':29B 'access':52B 'account':44B 'act':57B 'anoth':62B 'attack':50B 'check':34B 'could':40B,56B 'databas':30B 'datalor':19B,27B 'differ':47B 'host':23B 'jetbrain':20B,26B 'one':54B 'privileg':60B 'scope':36B 'self':22B 'self-host':21B 'servic':43B 'task':31B,39B 'use':41B 'vendor':24B 'workspac':35B,48B,55B","search_c":"'2026.4':67C 'account':80C 'allow':74C 'anoth':76C 'databas':72C 'datalor':65C 'improp':68C 'jetbrain':64C 'scope':69C 'servic':79C 'task':73C 'use':75C 'valid':70C 'workspac':77C","first_public_at":"2026-11-06T17:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123834","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123834","severity":null,"published_at":"2026-11-06T17:17:21+00:00","modified_at":"2026-11-06T17:17:21+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","fetched_at":"2026-11-06T17:43:12+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}