Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ CVE-2026-66297 — livebook

🟠 CVSS 8.0 — High ⚠️ Exploit Public CWE-78 OSV
8.0
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Unescaped deployment environment variables in generated setup commands

Summary

Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands.

LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker\_instructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly\_instructions/4 in lib/livebook\_web/live/hub/teams/deployment\_group\_agent\_component.ex interpolate deployment group environment variable values into the generated Docker and Fly.io setup commands without shell escaping. The values originate from the deployment group configuration and reach the sinks through Livebook.Hubs.Dockerfile.online\_docker\_info/3.

Both sinks place the value inside a double-quoted shell word, so a value containing a command substitution such as $(...) or backticks is evaluated by the shell without any need to break out of the quoting, and a literal double quote terminates the quoted word and allows arbitrary further tokens. The generated command is displayed in the Livebook web interface with a copy button, so a user who copies it and runs it without reviewing it first executes the injected commands on their own machine, under their own account.

An attacker requires privileges sufficient to set deployment group environment variables, while the resulting code execution occurs on the machine of whoever runs the generated command. The Kubernetes instructions are not affected, because they render the same values into a YAML manifest with escaping rather than into a shell command.

This issue affects livebook: from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9.

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is low, an attacker needs administrative privileges on the target. A user must actively cooperate. Rated impact: confidentiality none, integrity none, availability none.

CVSS metrics in full

The score comes from this vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

  • Attack vector: Network — reachable from anywhere that can route to the service.
  • Attack complexity: Low — the attack works reliably, with no preparation.
  • Attack requirements: Present — the target has to be in a particular state for the attack to work.
  • Privileges required: High — administrative rights are needed first.
  • User interaction: Active — the victim has to cooperate with the attack.
  • Confidentiality impact: None.
  • Integrity impact: None.
  • Availability impact: None.

Weakness class

CVE-2026-66297 is classified as CWE-78: OS Command Injection. Untrusted input reaches a shell command without neutralisation, so an attacker can run arbitrary operating system commands.

Affected software

CVE-2026-66297 is recorded against 1 package.

  • livebook

Timeline and source

Published on 5 August 2026 and last revised on 10 August 2026. A public exploit is known to exist, which raises the urgency of patching considerably. A vendor advisory or fix has been published. Record sourced from OSV.

References

github.com (Advisory)
cna.erlef.org (Web)
github.com (Fix)
github.com (Fix)
github.com (Fix)
hex.pm (Package)

Other advisories for this package

livebook has other advisories on record. If you are patching this one, these are worth checking on the same host:

Same weakness in other software

These advisories are the same class of weakness (CWE-78: OS Command Injection) in other software:

Details

Severity HIGH
CVSS Score 8.0
CVSS Vector CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
CWE CWE-78
Public Exploit ⚠️ Yes
Source OSV
Published 2026-08-05
Updated 2026-08-20
Modified 2026-08-10

Affected Packages

Software From version Fixed in
livebook — —

Similar Threats

Exploit Protection

Are you running livebook?

CVE-2026-66297 carries CVSS 8.0 High rating and a public exploit already exists. BotEraser checks your installation against this and other known CVE records, and blocks IPs associated with exploit activity.

Check My Site For CVE-2026-66297 →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesCVECVE 2026
✓