RCE in Livebook-dev Livebook

CVE-2026-66297

Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentC…

Vulnerability class: Command Injection (OS Command Injection)