What’s Vulnerable › Products

livebook-dev livebook vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your livebook-dev livebook version is affected

Latest livebook-dev livebook vulnerabilities

• CVE-2026-68746 — Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access (CVSS 8.8)
• CVE-2026-66885 — Livebook Teams identity callback lacks state binding, allowing login CSRF (CVSS 6.5)
• CVE-2026-66881 — Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download (CVSS 8.1)
• CVE-2026-66298 — JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts (CVSS 8.8)
• CVE-2026-66297 — Unescaped deployment environment variables in generated setup commands (CVSS 8.0)
• CVE-2023-35174 — Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows (CVSS 9.8)