CVE-2026-111093

Description

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files

References

• https://www.jetbrains.com/privacy-security/issues-fixed/