CVE-2026-68746
Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
Description
Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the deployment group it belongs to, and resolves that identifier against a locally cached list of deployment groups on every request in order to decide whether Teams identity enforcement is active. Livebook.Hubs.TeamClient.handle_call/3 in lib/livebook/hubs/team_client.ex does not distinguish a deployment group that could not be resolved from one that was resolved with identity enforcement switched off: the clause matches only the case where a group was found with enforcement enabled, and falls through to a catch-all that reports enforcement as switched off for everything else. The two neighbouring functions that decide user and application access resolve the same identifier and treat the same unresolved result as a denial. When the identity status is reported as switched off, Livebook.ZTA.LivebookTeams.authenticate/3 in lib/livebook/zta/livebook_teams.ex returns empty identity metadata and allows the request to continue instead of halting it. LivebookWeb.UserPlug.build_current_user/3 merges that empty metadata into a newly built user, whose access type defaults to full access, and LivebookWeb.AuthPlug.authorized?/1 grants access to any user holding full access. The cached identifier becomes unresolvable when the deployment group it refers to is deleted while the agent is not connected to receive the change, most concretely when a deployment group is deleted during the window in which an agent is disconnected or reconnecting. The client removes the group from its cached list without clearing the identifier that refers to it. Any client able to reach the affected server over the network is then granted the same access as a fully privileged member of the organisation, including the ability to read notebooks and configured secrets, execute code on the server's runtime, and disrupt its operation. This issue affects livebook: from 0.19.7 before 0.19.9.
INFO
Published Date :
Aug. 5, 2026, 8:17 p.m.
Last Modified :
Aug. 5, 2026, 8:17 p.m.
Remotely Exploit :
Yes !
Source :
6b3ad84c-e1a6-4bf7-a703-f496b71e49db
Affected Products
The following products are affected by CVE-2026-68746
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 4.0 | HIGH | 6b3ad84c-e1a6-4bf7-a703-f496b71e49db | ||||
| CVSS 4.0 | HIGH | 6b3ad84c-e1a6-4bf7-a703-f496b71e49db |
Solution
- Update Livebook to version 0.19.9 or later.
- Verify Team identity enforcement is correctly configured.
- Ensure deployment groups are not deleted while agents are offline.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-68746.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-68746 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-68746
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-68746 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-68746 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
Aug. 05, 2026
Action Type Old Value New Value Added Affected [{'cpes': ['cpe:2.3:a:livebook-dev:livebook:*:*:*:*:*:*:*:*'], 'repo': 'https://github.com/livebook-dev/livebook', 'vendor': 'livebook-dev', 'modules': ['Elixir.Livebook.Hubs.TeamClient', 'Elixir.Livebook.ZTA.LivebookTeams', 'Elixir.LivebookWeb.AuthPlug'], 'product': 'livebook', 'versions': [{'status': 'affected', 'version': '0.19.7', 'lessThan': '0.19.9', 'versionType': 'semver'}], 'packageURL': 'pkg:hex/livebook', 'packageName': 'livebook', 'programFiles': ['lib/livebook/hubs/team_client.ex', 'lib/livebook/zta/livebook_teams.ex', 'lib/livebook_web/plugs/auth_plug.ex'], 'collectionURL': 'https://repo.hex.pm', 'defaultStatus': 'unaffected', 'programRoutines': [{'name': "'Elixir.Livebook.Hubs.TeamClient':handle_call/3"}, {'name': "'Elixir.Livebook.Hubs.TeamClient':remove_deployment_group/2"}, {'name': "'Elixir.Livebook.Hubs.TeamClient':fetch_entry/3"}, {'name': "'Elixir.Livebook.ZTA.LivebookTeams':authenticate/3"}, {'name': "'Elixir.LivebookWeb.AuthPlug':authorized?/1"}]}, {'cpes': ['cpe:2.3:a:livebook-dev:livebook:*:*:*:*:*:*:*:*'], 'vendor': 'livebook-dev', 'modules': ['Elixir.Livebook.Hubs.TeamClient', 'Elixir.Livebook.ZTA.LivebookTeams', 'Elixir.LivebookWeb.AuthPlug'], 'product': 'livebook', 'versions': [{'status': 'affected', 'version': '0.19.7', 'lessThan': '0.19.9', 'versionType': 'other'}, {'status': 'affected', 'version': '0.19.7-cuda12', 'lessThan': '0.19.9-cuda12', 'versionType': 'other'}], 'packageURL': 'pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev', 'packageName': 'livebook-dev/livebook', 'programFiles': ['lib/livebook/hubs/team_client.ex', 'lib/livebook/zta/livebook_teams.ex', 'lib/livebook_web/plugs/auth_plug.ex'], 'collectionURL': 'https://ghcr.io', 'defaultStatus': 'unaffected', 'programRoutines': [{'name': "'Elixir.Livebook.Hubs.TeamClient':handle_call/3"}, {'name': "'Elixir.Livebook.Hubs.TeamClient':remove_deployment_group/2"}, {'name': "'Elixir.Livebook.Hubs.TeamClient':fetch_entry/3"}, {'name': "'Elixir.Livebook.ZTA.LivebookTeams':authenticate/3"}, {'name': "'Elixir.LivebookWeb.AuthPlug':authorized?/1"}]}, {'cpes': ['cpe:2.3:a:livebook-dev:livebook:*:*:*:*:*:*:*:*'], 'repo': 'https://github.com/livebook-dev/livebook', 'vendor': 'livebook-dev', 'modules': ['Elixir.Livebook.Hubs.TeamClient', 'Elixir.Livebook.ZTA.LivebookTeams', 'Elixir.LivebookWeb.AuthPlug'], 'product': 'livebook', 'versions': [{'status': 'affected', 'changes': [{'at': 'd374e90647edbb00286bfee9182c0161d29a8e07', 'status': 'unaffected'}, {'at': 'd6d0dfa746b172540442852f74de4a9deacc433b', 'status': 'unaffected'}, {'at': '2d3a2c710c880abd24a2bc888d3cf5239d98cf72', 'status': 'unaffected'}], 'version': 'fc2c87c6b0276705281842acbe17142d1ac4d555', 'lessThan': '*', 'versionType': 'git'}], 'packageURL': 'pkg:github/livebook-dev/livebook', 'packageName': 'livebook-dev/livebook', 'programFiles': ['lib/livebook/hubs/team_client.ex', 'lib/livebook/zta/livebook_teams.ex', 'lib/livebook_web/plugs/auth_plug.ex'], 'collectionURL': 'https://github.com', 'defaultStatus': 'unaffected', 'programRoutines': [{'name': "'Elixir.Livebook.Hubs.TeamClient':handle_call/3"}, {'name': "'Elixir.Livebook.Hubs.TeamClient':remove_deployment_group/2"}, {'name': "'Elixir.Livebook.Hubs.TeamClient':fetch_entry/3"}, {'name': "'Elixir.Livebook.ZTA.LivebookTeams':authenticate/3"}, {'name': "'Elixir.LivebookWeb.AuthPlug':authorized?/1"}]}] Added Description Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams. A Livebook Agent or App Server connected to Livebook Teams caches the identifier of the deployment group it belongs to, and resolves that identifier against a locally cached list of deployment groups on every request in order to decide whether Teams identity enforcement is active. Livebook.Hubs.TeamClient.handle_call/3 in lib/livebook/hubs/team_client.ex does not distinguish a deployment group that could not be resolved from one that was resolved with identity enforcement switched off: the clause matches only the case where a group was found with enforcement enabled, and falls through to a catch-all that reports enforcement as switched off for everything else. The two neighbouring functions that decide user and application access resolve the same identifier and treat the same unresolved result as a denial. When the identity status is reported as switched off, Livebook.ZTA.LivebookTeams.authenticate/3 in lib/livebook/zta/livebook_teams.ex returns empty identity metadata and allows the request to continue instead of halting it. LivebookWeb.UserPlug.build_current_user/3 merges that empty metadata into a newly built user, whose access type defaults to full access, and LivebookWeb.AuthPlug.authorized?/1 grants access to any user holding full access. The cached identifier becomes unresolvable when the deployment group it refers to is deleted while the agent is not connected to receive the change, most concretely when a deployment group is deleted during the window in which an agent is disconnected or reconnecting. The client removes the group from its cached list without clearing the identifier that refers to it. Any client able to reach the affected server over the network is then granted the same access as a fully privileged member of the organisation, including the ability to read notebooks and configured secrets, execute code on the server's runtime, and disrupt its operation. This issue affects livebook: from 0.19.7 before 0.19.9. Added CVSS V4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-636 Added Reference https://cna.erlef.org/cves/CVE-2026-68746.html Added Reference https://github.com/livebook-dev/livebook/commit/2d3a2c710c880abd24a2bc888d3cf5239d98cf72 Added Reference https://github.com/livebook-dev/livebook/commit/d374e90647edbb00286bfee9182c0161d29a8e07 Added Reference https://github.com/livebook-dev/livebook/commit/d6d0dfa746b172540442852f74de4a9deacc433b Added Reference https://github.com/livebook-dev/livebook/security/advisories/GHSA-74j5-6grg-g6wj Added Reference https://osv.dev/vulnerability/EEF-CVE-2026-68746