AIKIDO-2026-352311
livebook is vulnerable to Path Traversal
70
CVE Score
High
Path Traversal
TL;DR
When importing a .livemd notebook, Livebook takes each file_entries name instead of applying the filename validation used by every user-interface path. For a URL-type entry, the name is resolved into the session's cache directory. A user who opens the notebook and causes the entry to be fetched writes the downloaded response body to a path outside the session sandbox. The fix validates file entry names on import to prevent traversal.
How do I fix this?
Upgrade the livebook library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you open an untrusted notebook and evaluate or download a URL-type file entry it declares.
Package
Versions
0.11.0 - 0.18.6
Fixed in 0.18.70.19.0 - 0.19.8
Fixed in 0.19.9Background info
livebook is vulnerable to Path Traversal in versions 0.11.0 - 0.18.6 and 0.19.0 - 0.19.8.
Links
GitHub Release
Fix Commits
github.com/livebook-dev/livebook/commit/1443dd23df6e7b9203b6797f0695a807aeb81ddegithub.com/livebook-dev/livebook/commit/50f86982ebf36c22abeb379b55ec0f2859c83bb9github.com/livebook-dev/livebook/commit/acf4cb8c0c79b89c795b180f061be7de2d8b5aa9
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.