CVE-2026-32745
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
Published Mar 13, 2026 · updated Jun 17, 2026 · jetbrains datalore
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 13, 2026 · NIST NVD
Detected
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
Jun 17, 2026 · NIST NVD
Updated
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
Affected
- cpe jetbrains/dataloreversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-32745
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-32745
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings
nvd.nist.gov