# CVE-2026-66297: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev…

Source: https://junglewise.ai/threats/cve-2026-66297-improper-neutralization-of-special-elements-used-in-an-os-command  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-05  
License: CC BY 4.0 with a link back

CVE-2026-66297 · Severity: high · CVSS 8 · Published 2026-08-05

Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands.

LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly_instructions/4 in lib/livebook_web/live/hub/teams/deployment_group_agent_component.ex interpolate deployment group environment variable values into the generated Docker and Fly.io setup commands without shell escaping. The values originate from the deployment group configuration and reach the sinks through Livebook.Hubs.Dockerfile.online_docker_info/3.

Both sinks place the value inside a double-quoted shell word, so a value containing a command substitution such as $(...) or backticks is evaluated by the shell without any need to break out of the quoting, and a literal double quote terminates the quoted word and allows arbitrary further tokens. The generated command is displayed in the Livebook web interface with a copy button, so a user who copies it and runs it without reviewing it first executes the injected commands on their own machine, under their own account.

An attacker requires privileges sufficient to set deployment group environment variables, while the resulting code execution occurs on the machine of whoever runs the generated command. The Kubernetes instructions are not affected, because they render the same values into a YAML manifest with escaping rather than into a shell command.

This issue affects livebook: from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9.

Technologies: [Livebook](https://junglewise.ai/threats/technologies/livebook). Vendors: [Livebook](https://junglewise.ai/threats/vendors/livebook).

## Quick answers

**Is CVE-2026-66297 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-66297 being exploited in the wild.

**How severe is CVE-2026-66297?** High severity, with a CVSS score of 8, published 5 August 2026.

**Which products and versions are affected?** Livebook. The advisory does not name versions.

**Is there a fix for CVE-2026-66297?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-66297?** Check whether you run Livebook. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Livebook

## Related threats

- [Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client…](https://junglewise.ai/threats/cve-2026-68746-not-failing-securely-failing-open-vulnerability-in-livebook-dev)
- [Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's…](https://junglewise.ai/threats/cve-2026-66885-cross-site-request-forgery-csrf-vulnerability-in-livebook-dev)
- [Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file…](https://junglewise.ai/threats/cve-2026-66881-relative-path-traversal-vulnerability-in-livebook-dev-livebook)
- [Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger…](https://junglewise.ai/threats/cve-2026-66298-origin-validation-error-vulnerability-in-livebook-dev-livebook)