PT-2026-25323 · Jetbrains · Jetbrains Datalore

Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32745

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:A/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Datalore versions prior to 2026.1

Description A session hijacking issue existed in JetBrains Datalore due to the absence of the secure attribute for cookie settings. This allowed for potential unauthorized access to user sessions.

Recommendations Update JetBrains Datalore to version 2026.1 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-614

CWE-319

Related Identifiers

BDU:2026-04464

CVE-2026-32745

Affected Products

Jetbrains Datalore

References · 6

• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04464 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32745 · Security Note
• https://twitter.com/CVEnew/status/2032831377771737422 · Twitter Post
• https://t.me/CVEtracker/47371 · Telegram Post
• https://twitter.com/cyberbivash/status/2032541094471233888 · Twitter Post