AIKIDO-2026-352311
livebook is vulnerable to Path Traversal
70
High Risk
This Affects:
livebookTL;DR
When importing a .livemd notebook, Livebook takes each file_entries name instead of applying the filename validation used by every user-interface path. For a URL-type entry, the name is resolved into the session's cache directory. A user who opens the notebook and causes the entry to be fetched writes the downloaded response body to a path outside the session sandbox. The fix validates file entry names on import to prevent traversal.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you open an untrusted notebook and evaluate or download a URL-type file entry it declares.
Background info
livebook is vulnerable to Path Traversal in versions 0.11.0 - 0.18.6 and 0.19.0 - 0.19.8.
How to fix this
Upgrade the livebook library to the patch version.
Links
GitHub Release
Fix Commits
github.com/livebook-dev/livebook/commit/1443dd23df6e7b9203b6797f0695a807aeb81ddegithub.com/livebook-dev/livebook/commit/50f86982ebf36c22abeb379b55ec0f2859c83bb9github.com/livebook-dev/livebook/commit/acf4cb8c0c79b89c795b180f061be7de2d8b5aa9
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant