CVE-2026-66297

Name of the Vulnerable Software and Affected Versions livebook versions 0.13.0 through 0.18.6 livebook versions 0.19.0 through 0.19.8

Description An OS Command Injection issue exists where deployment setup commands are generated without proper shell escaping of environment variable values. The functions docker instructions/2 and fly instructions/4 in lib/livebook web/live/hub/teams/deployment group agent component.ex interpolate these values, which are processed through online docker info/3. Because values are placed within double-quoted shell words, an attacker with privileges to set deployment group environment variables can use command substitution (such as $(...) or backticks) or double quotes to inject arbitrary commands. These commands are then executed on the local machine of any user who copies and runs the generated setup instructions from the web interface. Kubernetes instructions are not affected as they use YAML manifest escaping.

Recommendations Update livebook versions 0.13.0 through 0.18.6 to version 0.18.7. Update livebook versions 0.19.0 through 0.19.8 to version 0.19.9.