CSRF in Livebook-dev Livebook

CVE-2026-66885

Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. When Livebook is configured to use Livebook Teams for…

Vulnerability class: CSRF (Cross-Site Request Forgery)

Affected products

Weakness classification (CWE)

References