Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-68746— Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access

Quick assessment

Affected
livebook-dev livebook
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Livebook是Livebook组织开源的一款用于编写交互式协作代码笔记本的 Web 应用程序。 Livebook 0.19.7版本至0.19.9之前版本存在异常处理不当漏洞，该漏洞源于身份验证失败时处理不当，无法区分无法解析的部署组与身份强制关闭的情况，可能导致未经身份验证的网络客户端获得完全访问权限，包括读取笔记本和配置的密钥、在服务器运行时执行代码及破坏其运行。

CVSS 7.7 · High EPSS 0.80% · P56

Affected Version Matrix 4

VendorProduct Version RangeStatus
livebook-dev livebook 0.19.7< 0.19.9 affected
0.19.7< 0.19.9 affected
0.19.7-cuda12< 0.19.9-cuda12 affected
fc2c87c6b0276705281842acbe17142d1ac4d555< * affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-68746

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
Source: CVE Program / CVE List V5
Vulnerability Description
Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the deployment group it belongs to, and resolves that identifier against a locally cached list of deployment groups on every request in order to decide whether Teams identity enforcement is active. Livebook.Hubs.TeamClient.handle_call/3 in lib/livebook/hubs/team_client.ex does not distinguish a deployment group that could not be resolved from one that was resolved with identity enforcement switched off: the clause matches only the case where a group was found with enforcement enabled, and falls through to a catch-all that reports enforcement as switched off for everything else. The two neighbouring functions that decide user and application access resolve the same identifier and treat the same unresolved result as a denial. When the identity status is reported as switched off, Livebook.ZTA.LivebookTeams.authenticate/3 in lib/livebook/zta/livebook_teams.ex returns empty identity metadata and allows the request to continue instead of halting it. LivebookWeb.UserPlug.build_current_user/3 merges that empty metadata into a newly built user, whose access type defaults to full access, and LivebookWeb.AuthPlug.authorized?/1 grants access to any user holding full access. The cached identifier becomes unresolvable when the deployment group it refers to is deleted while the agent is not connected to receive the change, most concretely when a deployment group is deleted during the window in which an agent is disconnected or reconnecting. The client removes the group from its cached list without clearing the identifier that refers to it. Any client able to reach the affected server over the network is then granted the same access as a fully privileged member of the organisation, including the ability to read notebooks and configured secrets, execute code on the server's runtime, and disrupt its operation. This issue affects livebook: from 0.19.7 before 0.19.9.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
未能安全地进行程序失效(Failing Open)
Source: CVE Program / CVE List V5
Vulnerability Title
Livebook 异常处理不当漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Livebook是Livebook组织开源的一款用于编写交互式协作代码笔记本的 Web 应用程序。 Livebook 0.19.7版本至0.19.9之前版本存在异常处理不当漏洞，该漏洞源于身份验证失败时处理不当，无法区分无法解析的部署组与身份强制关闭的情况，可能导致未经身份验证的网络客户端获得完全访问权限，包括读取笔记本和配置的密钥、在服务器运行时执行代码及破坏其运行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
livebook-dev livebook 0.19.7 ~ 0.19.9 cpe:2.3:a:livebook-dev:livebook:*:*:*:*:*:*:*:*
livebook-dev livebook 0.19.7 ~ 0.19.9 cpe:2.3:a:livebook-dev:livebook:*:*:*:*:*:*:*:*
livebook-dev livebook fc2c87c6b0276705281842acbe17142d1ac4d555 ~ * cpe:2.3:a:livebook-dev:livebook:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-68746

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 7966 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-68746

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-68746 (3)

Vendor Advisories for CVE-2026-68746 (2)

News Coverage for CVE-2026-68746 (1)

Same Patch Batch · livebook-dev · 2026-08-05 · 5 CVEs total

CVE-2026-66298 8.6 HIGH JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shor
CVE-2026-66881 7.0 HIGH Path traversal in imported file_entries name allows arbitrary file write via URL-type entr
CVE-2026-66885 6.8 MEDIUM Livebook Teams identity callback lacks state binding, allowing login CSRF
CVE-2026-66297 5.0 MEDIUM Unescaped deployment environment variables in generated setup commands

IV. Related Vulnerabilities

Same product: livebook
Same vendor: livebook-dev
Same weakness: CWE-636