{"id":"CVE-2026-123836","kind":"vulnerability","aliases":["CVE-2026-123836"],"related":[],"title":"JetBrains Datalore: workspace collaborators could take owner's SSH private key","description":"In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup","summary":"In JetBrains Datalore before 2026.4, workspace collaborators could obtain the workspace owner's SSH private key through a Git backup. An attacker with collaborator access could use that key to reach systems the owner can access over SSH.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["datalore","git","jetbrains","ssh","vendor"],"not_affected_if":["no-shared-workspaces","no-ssh-keys"],"how_to_check":"- Check the installed Datalore version against the fixed version in the JetBrains advisory (unknown in the sources given)\n- Confirm whether your Datalore workspaces are shared with collaborators who should not hold the owner's SSH keys","fix":"- Upgrade Datalore to `2026.4` or later (per the NVD description: before 2026.4 is affected)","status":"open","published_at":"2026-11-06T17:17:21+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","triaged_at":"2026-11-06T17:44:50+00:00","updated_at":"2026-11-06T17:44:50+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-06T17:44:50Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Datalore to `2026.4` or later (per the NVD description: before 2026.4 is affected)","reach":"unknown","title":"JetBrains Datalore: workspace collaborators could take owner's SSH private key","impact":"high","summary":"In JetBrains Datalore before 2026.4, workspace collaborators could obtain the workspace owner's SSH private key through a Git backup. An attacker with collaborator access could use that key to reach systems the owner can access over SSH.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["jetbrains","datalore","git","ssh"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Collaborator reads the owner's SSH private key and reuses it","analyst_note":"Confirm the fixed build and the exact collaborator role needed from the JetBrains Datalore advisory; the sources list only NVD.","how_to_check":"- Check the installed Datalore version against the fixed version in the JetBrains advisory (unknown in the sources given)\n- Confirm whether your Datalore workspaces are shared with collaborators who should not hold the owner's SSH keys","plain_action":"","needs_analyst":true,"not_affected_if":["no-shared-workspaces","no-ssh-keys"],"who_is_affected":"Teams that run JetBrains Datalore and share workspaces with collaborators while the workspace owner has SSH keys configured for Git. Workspaces without shared collaborators or without SSH keys in the owner's account are unlikely to expose the key; the sources do not say more.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000712,"input_tokens":4171,"output_tokens":589,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-123836':14A,17A '-2026':13A,16A '2026.4':27B,65C 'access':47B,58B 'attack':44B 'backup':42B,78C 'collabor':4A,29B,46B,67C 'could':5A,30B,48B,68C 'cve':12A,15A 'datalor':2A,18B,25B,63C 'git':19B,41B,77C 'jetbrain':1A,20B,24B,62C 'key':11A,38B,51B,75C 'obtain':31B,69C 'owner':7A,34B,56B,71C 'privat':10A,37B,74C 'reach':53B 'ssh':9A,21B,36B,60B,73C 'system':54B 'take':6A 'use':49B 'vendor':22B 'via':76C 'workspac':3A,28B,33B,66C","nicknames":[],"mitigations":[],"who_affected":"Teams that run JetBrains Datalore and share workspaces with collaborators while the workspace owner has SSH keys configured for Git. Workspaces without shared collaborators or without SSH keys in the owner's account are unlikely to expose the key; the sources do not say more.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["datalore","git","high","jetbrains","ssh","vendor"],"campaign_type":null,"search_a":"'-123836':14A,17A '-2026':13A,16A 'collabor':4A 'could':5A 'cve':12A,15A 'datalor':2A 'jetbrain':1A 'key':11A 'owner':7A 'privat':10A 'ssh':9A 'take':6A 'workspac':3A","search_b":"'2026.4':27B 'access':47B,58B 'attack':44B 'backup':42B 'collabor':29B,46B 'could':30B,48B 'datalor':18B,25B 'git':19B,41B 'jetbrain':20B,24B 'key':38B,51B 'obtain':31B 'owner':34B,56B 'privat':37B 'reach':53B 'ssh':21B,36B,60B 'system':54B 'use':49B 'vendor':22B 'workspac':28B,33B","search_c":"'2026.4':65C 'backup':78C 'collabor':67C 'could':68C 'datalor':63C 'git':77C 'jetbrain':62C 'key':75C 'obtain':69C 'owner':71C 'privat':74C 'ssh':73C 'via':76C 'workspac':66C","first_public_at":"2026-11-06T17:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123836","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123836","severity":null,"published_at":"2026-11-06T17:17:21+00:00","modified_at":"2026-11-06T17:17:21+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","fetched_at":"2026-11-06T17:43:12+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}