EUVD-2026-11772
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Lifecycle Timeline
3Description
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.
Analysis
A broken access control vulnerability in JetBrains Datalore allows authenticated users to escalate privileges horizontally, accessing resources of other users at the same permission level. The vulnerability affects Datalore versions prior to 2026.1 but only impacts specific configurations. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify all systems running affected versions and determine which match the vulnerable configuration; restrict administrative access and review recent authentication logs for suspicious privilege escalation attempts. Within 7 days: Implement compensating controls (access control reviews, role-based restriction enforcement, consider disabling the affected feature if non-critical); document all findings and implement enhanced monitoring. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today