Product by Livebook-dev
Livebook
6 known vulnerabilities in Livebook (Livebook-dev), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-66297 | Unescaped deployment environment variables in generated setup commands | 8.0 | |
| High | CVE-2026-68746 | Livebook: Failing Open | 8.8 | |
| High | CVE-2026-66881 | Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download | 8.1 | |
| Critical | CVE-2023-35174 | Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows | 8.6 | |
| High | CVE-2026-66298 | JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts | 8.8 | |
| Medium | CVE-2026-66885 | Livebook Teams identity callback lacks state binding, allowing login CSRF | 6.5 |