Failing Securely Vulnerability in Livebook by Livebook Dev

CVE-2026-68746

What is CVE-2026-68746?

The Livebook application experiences a Failing Securely vulnerability that could allow an unauthenticated network client to gain unrestricted access to the Livebook server. This occurs due to a flaw in the handling of deployment group identifiers, where the system fails to properly enforce identity checks. Consequently, if a deployment group is deleted while an agent is disconnected, the associated identifier remains unresolvable, allowing any client to connect and receive full access as a privileged member of the organization. This includes reading sensitive notebooks, executing code, and potentially disrupting operations.

References