CVE-2026-66297
Received Received - Intake

Command Injection in Livebook

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: EEF

Description
Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly_instructions/4 in lib/livebook_web/live/hub/teams/deployment_group_agent_component.ex interpolate deployment group environment variable values into the generated Docker and Fly.io setup commands without shell escaping. The values originate from the deployment group configuration and reach the sinks through Livebook.Hubs.Dockerfile.online_docker_info/3. Both sinks place the value inside a double-quoted shell word, so a value containing a command substitution such as $(...) or backticks is evaluated by the shell without any need to break out of the quoting, and a literal double quote terminates the quoted word and allows arbitrary further tokens. The generated command is displayed in the Livebook web interface with a copy button, so a user who copies it and runs it without reviewing it first executes the injected commands on their own machine, under their own account. An attacker requires privileges sufficient to set deployment group environment variables, while the resulting code execution occurs on the machine of whoever runs the generated command. The Kubernetes instructions are not affected, because they render the same values into a YAML manifest with escaping rather than into a shell command. This issue affects livebook: from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-06
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-66297
EUVD
EUVD-2026-53601

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
livebook livebook From 0.13.0 (inc) to 0.18.7 (exc)
livebook livebook From 0.19.0 (inc) to 0.19.9 (exc)
livebook-dev livebook From 0.13.0 (inc) to 0.18.7 (exc)
livebook-dev livebook From 0.19.0 (inc) to 0.19.9 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an OS Command Injection vulnerability in Livebook where deployment group environment variables are interpolated into Docker and Fly.io setup commands without proper shell escaping. Attackers with sufficient privileges can inject commands via variables like $(...) or backticks, which execute when users copy and run the generated commands.

Detection Guidance

To detect this vulnerability, check if your Livebook instance is running a vulnerable version (0.13.0 to 0.18.6 or 0.19.0 to 0.19.8). Inspect deployment group environment variables for suspicious values containing command substitutions like $(...) or backticks. Review generated Docker or Fly.io setup commands in the web interface for unescaped special characters.

Impact Analysis

If you copy and run the generated Docker or Fly.io setup commands without reviewing them, injected commands will execute on your machine under your account. This could lead to unauthorized actions, data access, or system compromise depending on the injected payload.

Compliance Impact

This vulnerability could indirectly impact compliance with GDPR and HIPAA by potentially exposing sensitive data or credentials if an attacker injects commands that access or transmit such information. The command injection occurs on the operator's workstation, which may handle regulated data, leading to unauthorized access or data breaches.

Mitigation Strategies

Upgrade Livebook to a patched version (0.18.7 or later, or 0.19.9 or later). Restrict privileges for users who can set deployment group environment variables. Avoid copying and running generated commands without manual review. Monitor for unauthorized command execution in system logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66297. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart