Threat Intelligence Database

CVE-2026-68746 is a high-severity vulnerability in livebook-dev livebook versions 0.19.7 up to but not including 0.19.9. It allows an unauthenticated network client to gain full access to a Livebook server that uses Livebook Teams for identity enforcement. The flaw arises when a deployment group identifier cached by the Livebook Agent or App Server becomes unresolvable due to deletion of the group while the agent is disconnected. This causes the system to incorrectly treat identity enforcement as disabled, granting full access by default.

CVE-2026-66885 is a Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook that allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. This occurs because the OAuth callback handling does not verify that the authorization code is tied to the initiating browser session, allowing session hijacking within the same Livebook Teams organization. The vulnerability affects livebook versions from 0.15.0 before 0.18.7 and from 0.19.0 before 0.19.9.

CVE-2026-66881 is a relative path traversal vulnerability in livebook-dev livebook that allows an attacker to write files with attacker-controlled content to arbitrary paths on the victim's system. This occurs when a victim opens a specially crafted notebook containing URL-type file entries, which bypass validation and containment checks, enabling file writes outside the intended directory. The vulnerability affects livebook versions from 0.11.0 before 0.18.7 and from 0.19.0 before 0.19.9. It requires user interaction but no authentication by the attacker. The CVSS 4.0 score is 7.0, indicating high severity.

CVE-2026-66298 is an origin validation error vulnerability in livebook-dev livebook that allows untrusted JavaScript in notebook outputs to trigger session-wide keyboard shortcuts. This can cause forced evaluation of all notebook cells and runtime restarts without user consent. The vulnerability arises because keydown events synthesized by untrusted scripts in a sandboxed iframe are forwarded and re-dispatched without proper validation, allowing malicious code execution. Affected versions include livebook from 0.5.0 before 0.18.7 and from 0.19.0 before 0.19.9.

CVE-2026-66297 is an OS Command Injection vulnerability in livebook-dev livebook affecting versions 0.13.0 through before 0.18.7 and 0.19.0 through before 0.19.9. It arises from improper neutralization of special elements in deployment setup commands generated for Docker and Fly.io, allowing command injection via deployment group environment variables. The injected commands execute on the machine of the user who copies and runs the generated command from the Livebook web interface. Exploitation requires privileges to set deployment group environment variables. Kubernetes instructions are not affected due to different rendering with escaping.