Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-66297— Unescaped deployment environment variables in generated setup commands

Quick assessment

Affected

livebook-dev livebook

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Livebook是Livebook组织开源的一款用于编写交互式协作代码笔记本的 Web 应用程序。 Livebook 0.13.0版本至0.18.7之前版本和0.19.0版本至0.19.9之前版本存在命令注入漏洞，该漏洞源于在生成Docker和Fly.io设置命令时未对部署组环境变量值进行shell转义，可能导致命令注入。

CVSS 5.0 · Medium EPSS 2.41% · P84 Updated Aug 06, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application

Affected Version Matrix 7

Vendor	Product	Version Range	Status
livebook-dev	livebook	`0.13.0< 0.18.7`	affected
		`0.19.0< 0.19.9`	affected
		`0.13.0< 0.18.7`	affected
		`0.19.0< 0.19.9`	affected
		`0.13.0-cuda12< 0.18.7-cuda12`	affected
		`0.19.0-cuda12< 0.19.9-cuda12`	affected
		`7cf4af5c10ec645f55a10f30e5661c54f6a6b319< *`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-66297

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Unescaped deployment environment variables in generated setup commands

Source: CVE Program / CVE List V5

Vulnerability Description

Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly_instructions/4 in lib/livebook_web/live/hub/teams/deployment_group_agent_component.ex interpolate deployment group environment variable values into the generated Docker and Fly.io setup commands without shell escaping. The values originate from the deployment group configuration and reach the sinks through Livebook.Hubs.Dockerfile.online_docker_info/3. Both sinks place the value inside a double-quoted shell word, so a value containing a command substitution such as $(...) or backticks is evaluated by the shell without any need to break out of the quoting, and a literal double quote terminates the quoted word and allows arbitrary further tokens. The generated command is displayed in the Livebook web interface with a copy button, so a user who copies it and runs it without reviewing it first executes the injected commands on their own machine, under their own account. An attacker requires privileges sufficient to set deployment group environment variables, while the resulting code execution occurs on the machine of whoever runs the generated command. The Kubernetes instructions are not affected, because they render the same values into a YAML manifest with escaping rather than into a shell command. This issue affects livebook: from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Vulnerability Title

Livebook 命令注入漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
livebook-dev	livebook	0.13.0 ~ 0.18.7	`cpe:2.3:a:livebook-dev:livebook::::::::`
livebook-dev	livebook	0.13.0 ~ 0.18.7	`cpe:2.3:a:livebook-dev:livebook::::::::`
livebook-dev	livebook	7cf4af5c10ec645f55a10f30e5661c54f6a6b319 ~ *	`cpe:2.3:a:livebook-dev:livebook::::::::`

II. Public POCs for CVE-2026-66297

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-66297

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-66297 (3)

Vendor Advisories for CVE-2026-66297 (2)

🔗 Unescaped deployment environment variables in generated setup commands · Advisory · livebook-dev/livebook · GitHub Read full article vendor-advisory related
🔗 EEF-CVE-2026-66297 - OSV related

News Coverage for CVE-2026-66297 (1)

🔗 CVE-2026-66297 related

https://www.cve.org/CVERecord?id=CVE-2026-66297

Same Patch Batch · livebook-dev · 2026-08-05 · 5 CVEs total

CVE-2026-66298	8.6 HIGH	JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shor
CVE-2026-68746	7.7 HIGH	Livebook Teams identity check fails open when the deployment group is unresolvable, allowi
CVE-2026-66881	7.0 HIGH	Path traversal in imported file_entries name allows arbitrary file write via URL-type entr
CVE-2026-66885	6.8 MEDIUM	Livebook Teams identity callback lacks state binding, allowing login CSRF

IV. Related Vulnerabilities

Same product: livebook

Same vendor: livebook-dev

Same weakness: CWE-78