CVE-2026-32745: JetBrains Datalore

Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days.

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings

Affected products

• JetBrains Datalore: before 2026.1 (fixed in 2026.1)

Published 2026-03-13. Last modified 2026-06-17.