CVE-2026-66297 livebook-dev CVE debrief

Who should care

Livebook users and administrators should be aware of this vulnerability and take steps to patch or mitigate it. This includes reviewing generated deployment setup commands, restricting privileges for setting environment variables, and monitoring for suspicious activity.

Technical summary

The livebook application has an Improper Neutralization of Special Elements used in an OS Command vulnerability. This allows for command injection into generated deployment setup commands. The vulnerability affects livebook versions from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9. An attacker requires privileges to set deployment group environment variables, while code execution occurs on the machine of whoever runs the generated command.

Defensive priority

Livebook users should prioritize patching to prevent potential command injection attacks.

Recommended defensive actions

• Patch livebook to version 0.18.7 or later, or 0.19.9 or later
• Review and validate generated deployment setup commands before execution
• Restrict privileges for setting deployment group environment variables
• Monitor for suspicious activity and implement compensating controls
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE-2026-66297 record indicates an Improper Neutralization of Special Elements used in an OS Command vulnerability in livebook. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly_instructions/4 interpolate deployment group environment variable values into generated Docker and Fly.io setup commands without shell escaping. Limited information is available on affected versions and vendor remediation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.